Product Owner Directory Services

Job Description

PURPOSE:Security Technology Services (STS) is a critical function within Standard Chartered Bank operating under the overall purview of Technology Services .The STS team is made up of cyber security thought leaders, who are accountable for the provision of a global set of cyber security services and products to maintain and continuously improve Bank s cyber security posture in today s ever evolving cyber security landscape.The STS team protect the Bank from cyber security threats by delivering effective information security technology services, managing and responding to security incidents to ensure, and support the continuity and growth of Bank s business operations; and meet the both internal and external stakeholders expectations across 70+ countries and territories, in which SCB operates.As part of the Security Transformation activities within SCB, STS is going through a capability transformation covering process and technology. This requires highly skilled and experienced cyber security architects to work with each key service line, to define, build and implement threat driven capability roadmaps, patterns and drive an innovative vision for security to protect the Bank from complex cyber threats in support of the Security Architecture & Capability Authority.RESPONSIBILITIES: Understand Directory Services needs and gather product requirements.Manage the Directory Services service product portfolio and participate in new product identification (inclusive POCs) new products and identify and implement enhancements and exploitation/optimization opportunities with existing products.Manage product vendor engagements and understand vendor product roadmaps.Researching new technological trends for Directory Services and identifying adoption and integration opportunities with the Authentication Services product portfolio.Engage closely with the engineering team to help determine the best technical implementation methods as well as a reasonable implementation schedule.Undertake responsibility for the design and implementation of integration components in line with Integration strategy and standards assisted by the IAM Service Architect.Ensure Directory Services product implementation projects into transition meet established operational acceptance criteria as part of the established service transition processesReview and sign-off on behalf of Directory Services detailed designs and associated implementation/decommissioning plans for Authentication Services products.Key subject matter expert for Directory Services products responsible for the on-going design integrity of the solution including analysing the impact of relevant change requests and providing general quality assurance over changes made which could potentially impact product integrityWork closely with Security Production Support teams to ensure high availability and vulnerability free application product installations, service incidents are resolved in a timely manner (through L3 type SME support) and change management processes are adhered to, to maintain the integrity of the product build and architectureResponsible for the strategic evolution of the directory capabilities within the Authentication service domain in alignment with changing business needs, threat land scape and technical requirements to increase the quality of the selected solutions concerning identify, protect, detect, respond & recovery domains. This also includes topics such as long-term sustainability and convergence of products over time and replacement of existing products.Ensure that the platform conforms to Standard Chartered security best practises and is fully consistent with Bank audit and compliance requirements.Ensure all relevant platforms are being efficiently and appropriately supported in SCB Continuous Integration / Continuous Deployment (CI/CD) toolchains, including identifying opportunities for toolchain and operational practise improvement and refinement across Cloud and non-Cloud environments.KEY STAKEHOLDERS:Security Trust and Solution Centre Cyber Capabilities, Architecture and InnovationSecurity Technology Services Service Architects and Operational teamsRespective Technical Service Engineering Product HeadsBusiness & CIO StakeholdersCOMPETENCIES (KNOWLEDGE & SKILLS):Minimum 10 years experience in Banking, Information Security TechnologyIn depth understanding of cyber-attack methodologies, vectors and corresponding mitigations in an Enterprise environment.Minimum 8-10 years experience in Authentication Services related Design, Engineering with experience leading a team in delivering technology centric customer focused servicesStrong Technical skills and good understanding in Directory Technologies related to Authentication Services core technical or product requirements.Bachelor Degree in Engineering, Computer Science/Information Technology or its equivalent with security related certifications (e.g. SANS GIAC, SABSA, CISSP).Deep experience in multi-tier application architecture in the context of Authentication Services, Kerberos, OAuth, SAML, Authentication/SSO standards, Directory Services solutions.Knowledge of technical security control environments and compliance frameworks including CSA CCM, ISO 27017 and NIST 800-53.Detailed working knowledge of latest Authentication & Directory Services products.Experience with product management or product design with a focus on Authentication/Directory Services products.Strong sense of being innovative and creative in exploiting the product portfolio to enhance service delivery processesExperience in managing vendor engagement.Experience in managing large scale deployments of Directory Services related productsHighly entrepreneurial with a high level of motivational energy, passion in field and an unrelenting drive to success.Strong sense of personal ownership and responsibility in accomplishing the service line and function goals.Able to get things done in a fast-paced environment. Be transparent and open around what doesn t work and what doesExcellent organisational and leadership skills (successfully lead and managed end-to-end technology services and or technology operations) with ability to manage multiple deadlines and effectively prioritiseExperience of developing an effective stakeholder strategy, influencing relevant stakeholders and decision makers, and executing decisions efficiently and consistently.Ability to lead and control programme and/or project management in the context of a significant amount of change.Excellent communication skills oral, written and presentation; technical reporting writing across various types of target audiences.,

Keyskills :
scrumagile product managementmarketing deliverylarge scale deployments product designcyber security