Cybersecurity Architect

Description

We are seeking a highly experienced Cybersecurity Architect to join our team in Southeast Asia. The ideal candidate will have 9+ years of experience in developing and implementing cybersecurity strategies, policies, and procedures. The Cybersecurity Architect will be responsible for designing and implementing secure network architectures, managing security risks, and ensuring compliance with regulatory requirements.

Must Have Skills

1. Relevant industry certifications (e.g. CIA, CRISC, CISA, ITIL, CISSP, GRCP / CRCM)
2. Cloud CSP training such as AWS Foundation and/or MS Azure Fundamentals
3. Experience with Technology Implementation or Operation
4. Hands on experience with Control Design and Implementation
5. Understanding of the Audit Lifecycle
6. Knowledge of relevant Technology and Business Regulations; ideal candidate has direct experience of interface with Regulators (principally PRA, MAS and HKMA).
7. Knowledge of and/or hands-on experience of Technology Architecture
8. Comfortable with ambiguity and able to make decisions
9. Process Design and Analysis
10. Documentation and Textual Analysis
11. Data Analytics
12. Experience negotiating with and influencing technical and/or senior stakeholders
13. Knowledge of Cloud and DevOps
14. Excellent understanding of Operational Risk Management for a technology stream
15. Strong performer, with efficiency and delivery outcomes
16. Makes a strategic difference
17. Fluent English communication & writing skills
18. Assertive & good problem-solving skills with common sense

Roles and responsibilities

• This role is key and responsible for continuing improvements in the Domain(s)s approach to risk identification and mitigation, control management and audit engagement within the framework set out by the relevant authorities.
• This operations role ensures a constant state of preparation, readiness and continuous improvement across process, risk management and reduction, audit success, documentation, MIS systems and reporting.
• Maintain & Implement Risk and Control Process for 1st line of defence as per bank's ERMF.
• Identify risk profile / R&R for all parties involved, Cloud Platform support Mgr, Platform engineer , Domain heads etc.
• Document & Maintain (review periodically for applicability, improvement and efficiency) the Risk Management process on Domain Risk Meetings, MOM Templates, Audit Engagements, Risk Approvals, Risk Extensions, Risk Assessments and Risk reviews done by UORM.
• Maintain central data repository for Risk & Control.
• This includes Risk Profile, Risk Analysis (Operational M7 & CRISP Security risks), Stakeholder engagement Matrix, CSAR Status, list of GIA Audits and status, Open and Overdue Audit status etc.
• Ensure Awareness of Rules of Engagement w.r.t Risk Management to all domain stakeholders either directly or through UORMs and Leadership to ensure consistency across domains.
• Advise and assist the Cloud & DevOps Portfolio Head(s) in driving and directing effective compliance with the prescribed Enterprise risk management framework
• Implement effective and efficient controls to minimise / mitigate operational impact
• Ensure proper management of risk and timely resolution of issues
• Promote understanding, practice and culture of Enterprise Operational Risk within the Domain(s).