The posting
WHO WE ARE:
As Singapore’s longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires.
Today, we’re on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia’s leading financial services partner for a sustainable future.
We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career.
Your Opportunity Starts Here.
Why Join
Protecting our customers’ assets and data is central to everything we do at OCBC. As part of Group CISO, you will help secure how machine, privileged and AI agent identities are controlled across the Group, and contribute to how the bank approach’s identity security for agentic AI.
How you succeed
We are looking for a non-human identity (NHI) security engineer with strong data analysis skills and a privileged access background to join Group CISO. You will secure and govern the Group’s non-human identities, and you will use telemetry and dashboards to show senior leadership how well privileged and non-human identities are controlled across the Group. You will also build towards securing agentic AI.
The role is weighted as follows:
- NHI and agentic AI security (60%): discovering, governing and monitoring machine and AI agent identities, operating within the direction set by enterprise identity architecture. NHI lifecycle management is the established foundation of this part of the role. Agentic AI security is a capability the role will build towards as the Group’s AI platforms mature.
- Security data analysis (40%): turning privileged access and identity telemetry into reliable insight for decision-making and using it to drive remediation.
What you do
NHI Lifecycle and Identity Governance
- Discovery and inventory: Build and maintain discovery and inventory of NHIs, including service accounts, API credentials, workload identities (managed identities and service principals) and AI agents, and identify shadow or unowned identities.
- Ownership and lifecycle: Map each NHI to an accountable human owner, and track the lifecycle of credentials, tokens, certificates and SSH keys (issuance, rotation, expiry and revocation), including secrets held in vaults, cloud secrets managers and CI/CD pipelines.
- Certificate and key hygiene: Use PKI and certificate lifecycle data and SSH key inventories to find expiring, unmanaged or weak credentials and drive their renewal or retirement.
- Identity governance operations: Operate NHI and agent lifecycle controls on the Group’s identity governance and administration (IGA) platform, under the standards and direction of enterprise identity architecture. This role implements and operates; enterprise standards are set by enterprise identity architecture, with VP-level input.
Security Data Analysis
- Dashboards for senior leadership: Build and run dashboards covering privileged account coverage, credential rotation compliance, non-compliant accounts, account lifecycle and NHI owner coverage. Define the metrics with stakeholders and keep their meaning consistent over time.
- Analytics and insight: Turn raw security and identity data into trend analysis, anomaly detection and risk indicators that help leaders prioritise action.
Who you are
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Data Engineering or a related field, or equivalent practical experience.
- At least 7 years (AVP) or 10 years (VP) of experience in security engineering, identity engineering, privileged access management or security analytics, preferably in banking or financial services. This includes at least 3 years (AVP) or 5 years (VP) of hands-on experience in non-human identity, machine identity, secrets management or privileged access.
- Hands-on experience securing non-human identities: discovering and inventorying service accounts, API keys, tokens, certificates and SSH keys, mapping them to accountable owners, and managing credential lifecycle, rotation and expiry.
- Working knowledge of PKI and certificate lifecycle management, SSH key management, and workload identities such as managed identities and service principals on cloud platforms.
- Working knowledge of API and token security with OAuth/OIDC or similar standards.
- Sound understanding of privileged access concepts: account lifecycle, credential vaulting and rotation, least privilege, just-in-time access and session monitoring.
- Hands-on skills in data analysis and modelling, SQL and Python, pipeline automation and dashboard construction.
- Ability to explain technical risk and data findings clearly to senior non-technical stakeholders.
Preferred experience
- Familiarity with agentic AI identity risks, such as agent credentials, tool access, delegated authority and privilege drift, or a clear interest in developing this expertise.
- Hands-on experience with IDIRA Enterprise Password Vault and Secrets Manager.
- Experience with cloud-native secrets management and CI/CD pipeline security tooling, such as GitHub Secrets, AWS Secrets Manager, Azure Key Vault and cloud KMS, for machine identity and token lifecycle in automated engineering pipelines.
- Experience building dashboards on a platform (e.g., Power BI), with log analytics tools.
- Familiarity with cloud and AI identity platforms such as AWS Bedrock and Microsoft Copilot Studio.
- Relevant certifications, for example CISSP, CCSP, or cloud security, identity or data credentials. Certifications are valued but not mandatory
Who we are
As Singapore's longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires.
Today, we're on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia's leading financial services partner for a sustainable future.
We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments.
Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career.
Your Opportunity Starts Here.
What we offer:
Competitive base salary. A suite of holistic, flexible benefits to suit every lifestyle. Community initiatives. Industry-leading learning and professional development opportunities. Your wellbeing, growth and aspirations are every bit as cared for as the needs of our customers.
