Senior VP, Head of Infrastructure Security Engineering

About UOB

United Overseas Bank Limited (UOB) is a leading bank in Asia with a global network of more than 500 branches and offices in 19 countries and territories in Asia Pacific, Europe and North America.
In Asia, we operate through our head office in Singapore and banking subsidiaries in China, Indonesia, Malaysia and Thailand, as well as branches and offices.
Our history spans more than 80 years.
Over this time, we have been guided by our values - Honorable, Enterprising, United and Committed.
This means we always strive to do what is right, build for the future, work as one team and pursue long-term success.
It is how we work, consistently, be it towards the company, our colleagues or our customers.

Group Technology and Operations (GTO) provides software and system development, information technology support services and banking operations.
We have centralized and standardized the technology components into Singapore, creating a global footprint which can be utilized for supporting our regional subsidiaries and the branches around the world.
We operate and support 19 countries with this architecture to provide a secure and flexible banking infrastructure.
Our Operations divisions provide transactional customer services for our businesses while also focusing on cost efficiency through process improvements, automation and straight through processing.

The Head of Infrastructure Security Engineering will be responsible for the overall strategic direction for the Infrastructure Security Engineering team and designing, developing, deploying, maintaining, and enhancing the Bank's Infrastructure Security protection capabilities.

This position will work closely with various teams and other stakeholders within Group Information Security (GIS) and other technology teams to understand the capability requirements and ensure the Bank selects and implements the relevant technology capabilities to mitigate such infrastructure security threats and deliver the right telemetry for management reporting/escalations and detection/response processes.

The role will be specifically responsible for the following Infrastructure Security Engineering service pillars:

• Vulnerability Management
• Platform & Database Security
  • Security Hardening & Configuration Compliance Validation
  • Privileged Identity Engineering
  • Secure Authentication Engineering
  • Host Protection (HIPS and Malware Protection)
• Endpoint & Network Security Configuration Governance
• Cloud Security Engineering & Cloud Security Configuration Governance
• Cryptography Key Management

Key Responsibilities:

• Lead a team of security engineers (~25) for delivery of daily responsibilities required to effectively maintain the lifecycle of infrastructure security technologies implemented.
  This will include managing project and vendor resources as and when needed.
• Provide leadership as an internal subject matter expert with respect to infrastructure security engineering and own the Infrastructure Security engineering service and product roadmap.
• Continuously assess and understand the Bank's attack surface and exposure in relation to vulnerabilities and non-compliance to established technical security standards.
• Ensure high availability, stability and coverage of infrastructure security technologies being managed including proactively managing technology lifecycle risks.
• Define functional and technical requirements for new capabilities and enhancements and drive product evaluations and proof-of-concepts.
• Provide leadership over strategic projects and service improvements being delivered in conjunction with the Infrastructure Security engineering service and product roadmap and the Bank's information and cyber security strategy.
• Manage the Total Cost of Ownership (TCO) for Infrastructure Security Engineering which includes investments and business-as-usual financials.
• Maintain contemporary knowledge of trends and technologies and assess applicability to the Bank's environment in the spirit of continuous service and capability improvement.
• Define and maintain design documentation, processes, procedures and metrics to demonstrate effective and efficient management of services and capabilities.
• Provide support for all Audit and Regulatory requests.

Others:

• Work within established practices and represent Infrastructure Security Engineering on major incidents in order to provide support or resolve related incidents and issues.
• Communicate effectively with a variety of stakeholders including technical and management staff.
• Capable of managing a number of priorities and deliverables in an operational, interrupt driven environment with minimal guidance or supervision.

Education

• Degree in engineering/Computer Science / IT/Cyber Security from a recognized education institution.
• Professional security related qualification (e.g.
  CISSP, SANS GCIA, GCIH etc.) will be favorable although not mandatory.

Technical Skills

• Overall 15 to 18 years of experience and 10 to 12 years relevant experience.
• Strong track record of managing technical resources across the technology lifecycle (design, build, deploy and maintain).
• Strong understanding of security tools in the area of infrastructure security technologies.
• Possesses a strong security threat mindset with a passion for automation.
• Proven track record of decision-making and leadership with matrixed teams.
• Ability to effectively translate and present solutions in business or management terms.
• Good understanding of various end user, platform and network technologies including familiarity with cloud technologies such as AWS, Azure and/or GCP.

Soft Skills

• Ability to work independently with minimal supervision.
• Excellent written, verbal communication and presentation skills.
• Strong people management skills.
• Process aware mindset.
• Strong analytical and problem-solving skills.
• Effective time management and organizational skills.

UOB is an equal opportunity employer.
UOB does not discriminate on the basis of a candidate's age, race, gender, color, religion, sexual orientation, physical or mental disability, or other non-merit factors.
All employment decisions at UOB are based on business needs, job requirements and qualifications.
If you require any assistance or accommodations to be made for the recruitment process, please inform us when you submit your online application.

Apply now and make a difference.

• Strategise
• Engage
• Execute
• Develop
• Skills
• Experience