Head, Iam Threats Architecture and Controls

Job ID: 34644

Location: Singapore, SG

Area of interest: Technology

Job type: Regular Employee

Work style: Office Working

Opening date: 21 Jul 2025

**Role Overview**-
- Identity and Access Management (IAM) is a critical function within Standard Chartered Bank operating under the overall purview of Group CISO. We are seeking a strategic, technically strong leader to head our Identity and Access Management (IAM) Threats, Architecture, and Controls function. This role is accountable for defining and driving the enterprise IAM security architecture and threat response strategy, ensuring that controls are effective, scalable, and aligned to the dynamic cyber threat landscape.
You will lead the identification and prioritization of IAM initiatives based on threat intelligence, risk posture, and emerging technology trends—including the potential risks and impacts of artificial intelligence (AI), machine learning, and quantum computing. You will also lead the required controls onboarding and operating effectiveness validation of controls. This is a critical leadership role that requires technical depth, architectural vision, and the ability to engage and influence a wide range of stakeholders across the enterprise.**RESPONSIBILITIES**

**Strategy**
- Develop and lead a multi-year strategy for IAM Threats, Architecture, and Controls that aligns with enterprise security goals, ICS priorities, regulatory requirements, and real-world threat intelligence.
- Continuously review and reprioritize the IAM book of work based on risk impact, threat evolution, business needs, and technology innovation.
- Ensure alignment with emerging cyber security risks—including those associated with AI-driven identity attacks, adversarial machine learning, synthetic identities, and quantum cryptography threats.
- Provide the Security Solution Architecture and frameworks aligned with Zero Trust principles, ensuring scalable and consistent policy enforcement across hybrid and multi-cloud environments.

**Business**
- Own the enterprise IAM security architecture design patterns, spanning workforce, privileged, and non human identities domains across all lines of Businesses in the Bank
- Design robust, resilient identity security models incorporating Zero Trust, cloud-native IAM (AWS, Azure), and federated identity systems.
- Define and maintain oversight of controls across authentication, authorization, secrets management, session lifecycle, access governance, and identity federation (OAuth2, SAML, OIDC).
- Understand Business Strategies and Priorities and develop technical IAM security roadmap in line with business strategies and use of emerging technologies
- Integrate threat intelligence and adversary techniques (MITRE ATT&CK) into IAM design and monitoring practices.
- Lead the analysis and partner with Cyber Ops on integration of IAM signals into detection and response pipelines via SIEM/SOAR and security analytics platforms.

**Processes**
- Responsible for executing and supervising the framework and process execution for all IAM Global Process Owner (GPO) responsibilities, overall controls onboarding and operating effectiveness of front to back IAM controls and processes as defined in the Group’s Operational Risk Framework and ICS RTF.

**Technology**
- Embed IAM security requirements in DevOps and CI/CD environments, including but not limited to access governance, secrets management, modern authentication and API token governance.
- Lead a team of SMEs that drives controls onboarding and controls operating effectiveness review across the organisation for authorisation, authentication and secrets security in design reviews, transformation initiatives, and cloud migrations.
- Monitor, assess, and advise on the security implications of emerging technologies such as AI, deepfake-enabled identity fraud, generative threats, and post-quantum cryptographic disruption.
- Collaborate with research, architecture, and risk functions to prepare the IAM program for next-generation attack vectors and regulatory shifts.
- Plan and oversee the delivery of a robust set of security technologies across IAM to enable delivery of IAM mission and vision.
- Embed anomaly detection and telemetry into access governance, privileged identity management, authentication and secrets systems to enable proactive monitoring and alerting.

**People & Talent**
- Act as the strategic and technical advisor to stakeholders across security, IT, enterprise architecture, legal, HR, and business leadership.
- Translate complex IAM security issues into business-relevant narratives to influence leadership and secure program support.
- Represent IAM security in architecture governance forums, risk committees, and strategic project reviews.
- Lead, mentor, and grow a team of IAM security solution designers, IAM risk analysts and threat and control analysts.
- Foster a collaborative and high-performance team culture.
- Manage key vendor relationships related to cyber security s