Cloud Security Specialist

**Job Description**:
Strategy

Work with various security service lines, product owners and Public Cloud Infrastructure services providers to evaluate various security solutions to be implemented for the Bank’s cloud and container environments

Business

Facilitate the implementation of container platform services with adequate security

Provide guidance on implementation of container service designs conforming to SCB Global Information Security Policies and Standards

Processes

Responsible for building and operationalizing security review of Cloud Native and Containerized Applications utilizing Public Cloud Infrastructure (IaaS and PaaS services from AWS and Azure) as well on-premise microservice based platforms

Perform the Threat Modelling for critical Cloud Applications, including Crown Jewels, using MITRE ATT&CK Framework or STRIDE as applicable.

Support internal and external audits

Support cloud delivery teams in building security controls delivered as code

Support the validation of service design implementation for containerized and non-containerized services

Support the review and onboarding of security monitoring use cases for various security events

Have a good understanding of Network Connectivity for Hybrid and Multi-Cloud environments

Have good understanding of Cloud and On-premise Network Patterns, resiliency models, and high availability

Have a good understanding of end to end Network Security for defence in depth

Risk Management

This role has key responsibility for continuous improvements in the Domain(s)’s approach to risk identification and mitigation, control management and audit engagement within the framework set out by the relevant authorities.

Governance

Process includes the procedures and protocols on Domain Risk Meetings, MOM Templates, Audit Engagements, Risk Approvals, Risk Extensions, Risk Assessments and Risk reviews done by UORM’s and ensure consistency across domains.

Maintain central data pertaining to Applications Support Risk & Control.

Ensure Awareness of Rules of Engagement w.r.t Risk Management to all PSS Managers, stakeholders either directly or through UORM’s and Leadership to ensure consistency across domains Work with internal and external auditors support auditing requirements

Regulatory & Business Conduct

Display exemplary conduct and live by the Group’s Values and Code of Conduct.

Take personal responsibility for embedding the highest standards of ethics, including regulatory and business conduct, across Standard Chartered Bank. This includes understanding and ensuring compliance with, in letter and spirit, all applicable laws, regulations, guidelines and the Group Code of Conduct.

Lead the Cloud and Container Security to achieve the outcomes set out in the Bank’s Conduct Principles: Align with Bank’s Cloud First and Secure by Design Strategy *

Effectively and collaboratively identify, escalate, mitigate and resolve risk, conduct and compliance

**QUALIFICATIONS**: Training, licenses, memberships and certifications

At least 10 years of professional experience working on Cyber Security and cloud domain

Certifications in AWS or Azure cloud - Must have

Container Certifications CKA, CKS, CKAD - Desirable

Security certifications like CISSP, CCSP, CISM, CISA, SANS, etc - Preferred

Substantial experience in the banking industry, including demonstrated success in a similar role.

Must possess sharp technical acumen, excellent interpersonal skills and multi-cultural awareness and sensitivity.

Ability to work with geographically dispersed and highly varied stakeholders

Under the revised Employment Agencies Licence Condition 5(b), employment agencies (EAs) are required to collect the personal data (e.g., NRIC, FIN) of applicants referred to employers for permanent or contract job positions of at least 6 months with a fixed monthly salary of $3,300 and above. PDPA requirements on collection, use and disclosure of personal data are not applicable to EAs that are collecting such information, as it is a regulatory requirement.

Geetali Rastogi

**Registration No**: R1980793| EA Licence No: 12C6253

DYNAMIC HUMAN CAPITAL PTE. LTD. | 2 Kallang Avenue #03-08 CT Hub Singapore 339407