Senior Vp, Head Of Infrastructure Security Engineering, Group Info Security

Senior VP, Head of Infrastructure Security Engineering, Group Info Security

Posting Date: 27 Jan
Location: Alexandra (City Area), SG
Company: United Overseas Bank Ltd

About UOB
United Overseas Bank Limited (UOB) is a leading bank in Asia with a global network of more than branches and offices in 19 countries and territories in Asia Pacific, Europe and North America.

Our history spans more than 80 years, guided by our values – Honorable, Enterprising, United and Committed.

About the Department
Group Technology and Operations (GTO) provides software and system development, information technology support services and banking operations. We operate and support 19 countries with a secure and flexible banking infrastructure.

Job Responsibilities
The Head of Infrastructure Security Engineering will be responsible for the overall strategic direction for the Infrastructure Security Engineering team and designing, developing, deploying, maintaining, and enhancing the Bank's Infrastructure Security protection capabilities. This position will work closely with various teams and stakeholders within Group Information Security (GIS) and other technology teams to ensure the Bank selects and implements the relevant technology capabilities to mitigate infrastructure security threats. The role will be specifically responsible for the following Infrastructure Security Engineering service pillars:

1. Vulnerability Management
2. Platform & Database Security
3. Security Hardening & Configuration Compliance Validation
4. Privileged Identity Engineering
5. Secure Authentication Engineering
6. Host Protection (HIPS and Malware Protection)
7. Endpoint & Network Security Configuration Governance
8. Cryptography Key Management

Key Responsibilities:

1. Lead a team of security engineers (~25) for the maintenance of infrastructure security technologies.
2. Provide leadership as an internal subject matter expert and own the Infrastructure Security engineering service and product roadmap.
3. Continuously assess the Bank's attack surface and exposure in relation to vulnerabilities.
4. Ensure high availability and stability of infrastructure security technologies.
5. Define functional and technical requirements for new capabilities and enhancements.
6. Manage the Total Cost of Ownership (TCO) for Infrastructure Security Engineering.
7. Maintain contemporary knowledge of trends and technologies.
8. Define and maintain design documentation, processes, procedures, and metrics.

Others:
Work within established practices and represent Infrastructure Security Engineering on major incidents. Communicate effectively with a variety of stakeholders. Manage multiple priorities and deliverables in an operational environment with minimal guidance.

Job Requirements

Education:
Degree in Engineering / Computer Science / IT / Cyber Security from a recognized institution. Professional security related qualification (e.g. CISSP, SANS GCIA, GCIH) is favorable.

Technical Skills:
15 to 18 years of overall experience and 10 to 12 years relevant experience. Strong track record of managing technical resources. Strong understanding of security tools in infrastructure security technologies. Strong security threat mindset with a passion for automation. Proven decision-making and leadership skills with matrixed teams. Ability to translate solutions in business or management terms. Good understanding of end user, platform, and network technologies including cloud technologies.

Soft Skills:
Ability to work independently with minimal supervision. Excellent written, verbal communication, and presentation skills. Strong analytical and problem-solving skills. Effective time management and organizational skills.

Be a part of UOB Family
UOB is an equal opportunity employer. All employment decisions at UOB are based on business needs, job requirements, and qualifications. If you require any assistance or accommodations to be made for the recruitment process, please inform us when you submit your online application.