Head, Cloud Security

Job Description

The Role ResponsibilitiesTechnology powers Standard Chartered Banks vision and strategic agenda through the provision of innovative and efficient technology solutions; we will deliver greater value to our business stakeholders; we will improve the skills and flexibility of our people and work more effectively with our internal and vendor service partners.Enterprise Technology (ET) is responsible for providing application and Infrastructure services to all business lines within the bank namely CCIB, CPBB, Data and Global Functions. The Cloud function lies within ET and is responsible for engineering, building and supporting the Global IaaS and PaaS platforms for Public Cloud as well as Private Cloud in Standard Chartered s footprints across the globe. The global team spans across the United Kingdom, India, Malaysia, China and Singapore.We are looking for a Head of Cloud Security who will be responsible for managing and developing teams, as well as building secure infrastructure that runs our security products in the Cloud. This includes evaluating, designing, developing, and implementing high quality engineering solutions for the bank. Youll be working within a global team on innovative technology.We are looking for a result oriented, self-starter who can dive deep into core engineering solutions and think innovatively, but in a pragmatic way to engineer a highly available Multi-Cloud Platform. You love to Build, Test, Deploy and Manage things with new Technologies in the Cloud. We eat, breathe and sleep Agile methodologies and best DevSecOps PracticesStrategy
• Set security strategy and best practices for cloud security working with the Cloud Security Architects.
• Provide advice on security best practices, and guide teams in developing, adopting and enforcing security standards within the organisation.
Business
• Head a team that would design and implement security best practices across all Cloud platforms.
• Implement the latest security tools and techniques that improve the security posture of the organization. Perform periodic reviews and monitor networks, analyze logs and systems in order to prohibit unauthorized use, prevent loss of critical information, and maintain service availability.
• Guide the team to identify and remediate security gaps using industry best practices and automated solutions.
• Be recognised as a trusted partner for business application owners and other technology teams who seek to make use of Cloud based infrastructure.
• Oversee build out of Compliance automation by developing in-house tools as well as evaluating and deploying third party products.
• Introduce & support emerging technology and best market practices to ensure consistent and state of the art systems are built, and business achieves enhanced benefits
• Identify technology bottlenecks in Cloud and specify optimization/automation to be implemented.
• Be involved in the design and subsequent implementation of software and service infrastructure
• Participate in external and internal audits and bring them to successful completion.
• Manage stakeholder communication at all levels of the organisation.
Processes
• Identify processes that are manual, and improve through automation.
People and Talent
• Be a role model and build the appropriate culture and values. Set appropriate tone and expectations from the team and stakeholders.
• Ensure the provision of ongoing training and development; make sure that the team members are suitably skilled and qualified for their roles, ensuring that they have effective supervision in place to mitigate any risks.
• Set and monitor job descriptions and objectives for direct reports and provide feedback and rewards in line with their performance against those responsibilities and objectives.
• Scouting, hiring, inspiring and managing the best technology talents in the field of Cloud, and emerging technologies both internally and externally.
• Provides mentorship and guidance for our team around software architecture and enterprise platform integrations
• Is open-minded, a team player, and excited by Cloud technology challenges in an innovative working environment
Risk Management
• Ensure a full understanding of the risk and control environment within the Cloud organisation
• Ensure onboarding of technologies are done properly with Legal, Compliance and Security Teams
• Act quickly and decisively when any risk and control weakness become apparent and ensure they are addressed within an appropriate timeframe and, if necessary, escalated through the relevant committees
Governance
• Understand and comply with, in letter and spirit, all applicable laws, and regulations, including those governing anti-money laundering, terrorist financing, and sanctions; the Group s policies and procedures; and the Group Code of Conduct.
• Effectively and collaboratively identify, escalate, mitigate and resolve risk and compliance matters.
• Embed the Group s values and code of conduct to ensure that adherence with the highest standards of ethics, and compliance with relevant policies, processes, and regulations among employee s form part of the culture.
Regulatory & Business Conduct
• Display exemplary conduct and live by the Group s Values and Code of Conduct.
• Take personal responsibility for embedding the highest standards of ethics, including regulatory and business conduct, across Standard Chartered Bank. This includes understanding and ensuring compliance with, in letter and spirit, all applicable laws, regulations, guidelines and the Group Code of Conduct.
• Effectively and collaboratively identify, escalate, mitigate and resolve risk, conduct and compliance matters.
• Embed Here for good and Group s brand and values in the team
• Perform other responsibilities assigned under Group, Country, Business or Functional policies and procedures.
• Responsible for building a culture of good conduct
• Lead the data team to achieve the outcomes set out in the Bank s Conduct Principles: Fair Outcomes for Clients; Effective Operation of Financial Markets; Financial Crime Prevention; The Right Environment.
Key Stakeholders
• Cloud Teams, Enterprise/Domain Architecture Teams, Enterprise Technology Team, Technology Standards Team
Our Ideal Candidate
• Degree in Engineering, Computer Science, mathematics, physics or a technical discipline. Higher degree preferred
• 10+ years of experience in the industry with several years of experience in Cloud and Infrastructure Security and managing large scale infrastructure on the cloud.
• Professional Cloud Certification in AWS, Azure, or Google Cloud.
• Strong foundation and in-depth technical knowledge of security engineering, IAM, security protocols and applied cryptography.
• Strong skills in at least one or more scripting/programming language; Perl, Python, Go, Shell, etc.
• Passionate about security, enjoy challenges and maintain up-to-date knowledge of available and emerging security threats and various security technologies.
• Knowledge of Containers, Kubernetes, Docker Swarm or other cluster management software
• Strong awareness of DevSecOps practices and ways of implementing security for a fast paced environment.
• Strong understanding of engineering practices and large scale feature development.
• Strong interpersonal skills with the ability to communicate and work effectively across the organization.
• You would love to be in a high performing team and enjoy working with smart colleagues. We are open to new ideas and embrace collaboration and sharing in our Kanban/Scrum teams. Most of our days consist of Dailys, Sprint planning, Retrospections and most importantly to Getting Things Done.
• Open to working in areas outside of your comfort zone, experimenting with new technologies and techniques
,

Keyskills :
code of conductprivate cloudcontent generationrole modellife insuranceinternal audit