WHO WE ARE:
As Singapore’s longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires.
Today, we’re on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia’s leading financial services partner for a sustainable future.
We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career.
Your Opportunity Starts Here.
Why Join
Protecting our customers’ assets and data is central to everything we do at OCBC. As part of Group CISO, you will help secure how machine, privileged and AI agent identities are controlled across the Group, and contribute to how the bank approach’s identity security for agentic AI.
How you succeed
We are looking for a non-human identity (NHI) security engineer with strong data analysis skills and a privileged access background to join Group CISO. You will secure and govern the Group’s non-human identities, and you will use telemetry and dashboards to show senior leadership how well privileged and non-human identities are controlled across the Group. You will also build towards securing agentic AI.
The role is weighted as follows:
NHI and agentic AI security (60%): discovering, governing and monitoring machine and AI agent identities, operating within the direction set by enterprise identity architecture. NHI lifecycle management is the established foundation of this part of the role. Agentic AI security is a capability the role will build towards as the Group’s AI platforms mature.
Security data analysis (40%): turning privileged access and identity telemetry into reliable insight for decision-making and using it to drive remediation.
What you do
NHI Lifecycle and Identity Governance
Discovery and inventory: Build and maintain discovery and inventory of NHIs, including service accounts, API credentials, workload identities (managed identities and service principals) and AI agents, and identify shadow or unowned identities.
Ownership and lifecycle: Map each NHI to an accountable human owner, and track the lifecycle of credentials, tokens, certificates and SSH keys (issuance, rotation, expiry and revocation), including secrets held in vaults, cloud secrets managers and CI/CD pipelines.
Certificate and key hygiene: Use PKI and certificate lifecycle data and SSH key inventories to find expiring, unmanaged or weak credentials and drive their renewal or retirement.
Identity governance operations: Operate NHI and agent lifecycle controls on the Group’s identity governance and administration (IGA) platform, under the standards and direction of enterprise identity architecture. This role implements and operates; enterprise standards are set by enterprise identity architecture, with VP-level input.
Security Data Analysis
Dashboards for senior leadership: Build and run dashboards covering privileged account coverage, credential rotation compliance, non-compliant accounts, account lifecycle and NHI owner coverage. Define the metrics with stakeholders and keep their meaning consistent over time.
Analytics and insight: Turn raw security and identity data into trend analysis, anomaly detection and risk indicators that help leaders prioritise action.
Who you are
Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Data Engineering or a related field, or equivalent practical experience.
At least 7 years (AVP) or 10 years (VP) of experience in security engineering,…