AVP, DevSecOps Engineer, Information Security Services, Group Technology
- Singapore
- Permanent
- Full-time
Group Technology enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In Group Tech, we manage the majority of the Bank's operational processes and inspire to delight our business partners through our multiple banking delivery channels.Responsibilities
- Automate cybersecurity tasks to enhance the efficiency and effectiveness of the defense team, reducing manual intervention
- Strong analytical mindset to connect insights across varied log sources for bulding automation use cases.
- Collaborate with cross-functional teams to identify and mitigate security vulnerabilities, ensuring a comprehensive and proactive approach to cybersecurity
- Provide technical expertise and guidance to the organization on cybersecurity-related matters, contributing to the overall security posture
- Stay up-to-date with the latest security trends, technologies, and industry developments to recommend and implement innovative solutions
- Bachelor's or Master's degree in Computer Science, Information Technology, or a related field
- Minimum 5 years of experience in a cybersecurity engineering or information security role, preferably in the financial services industry
- Strong understanding of cybersecurity principles, frameworks, and best practices, such as NIST, ISO, and OWASP
- Strong problem-solving mindset with focus on eliminating manual tasks.
- Ability to correlate data from multiple log sources to create effective automation use cases.
- Proficient in scripting and automation tools (e.g., Python, PowerShell, Ansible) to streamline security operations and reduce manual intervention
- Excellent problem-solving, analytical, and critical thinking skills to identify and address complex security challenges
- Ability to work collaboratively with cross-functional teams and communicate technical information to both technical and non-technical stakeholders
- Certifications in relevant cybersecurity domains (e.g., CISSP, CISA, GIAC) are highly desirable