VP/AVP, Quantum Cryptographic Engineer

About the role

DBS is looking for an experienced, technical cybersecurity professional to lead its Post-Quantum Cryptographic (PQC) migration. The role defines the cryptographic transition strategy, ensures compliance with regulatory timelines such as those of the CSA and MAS, embeds crypto-agility into technology governance and manages stakeholders from senior management and engineering teams to external vendors. It is based at the DBS Asia Hub.

Key responsibilities

• Define and run a multi-year PQC migration roadmap, meeting regulatory and supervisory deadlines.
• Build a long-term crypto-agility framework so the bank can adapt to new cryptographic standards without major disruption.
• Brief senior management regularly on risk posture, milestones, resource allocation and compliance status.
• Work with Risk Management, Technology Risk Management, Enterprise Architecture, SRE, Infrastructure and Application Development to find vulnerable assets (e.g. VPNs, authentication services, network protocols) and move them to NIST-approved algorithms such as ML-KEM and ML-DSA.
• Partner with suppliers, hardware vendors and industry working groups to shape product roadmaps and enforce quantum-safe requirements.
• Guide the definition, update and governance of enterprise standards on secure cryptography.

Required profile

• Bachelor's or Master's degree in Computer Science, Cybersecurity, Cryptography or a related field.
• At least 10 years of enterprise cybersecurity experience focused on cryptography, PKI or security architecture.
• Proven track record leading cross-functional task forces or large transformation programs, with strong negotiation skills with vendors.
• Ability to explain complex cryptographic risks clearly to executives.

Required skills

• Deep knowledge of RSA, ECC, AES, SHA and the transition to ML-KEM, ML-DSA and SLH-DSA.
• Hands-on experience with applied cryptography, HSMs, key management and the security lifecycle.
• Experience with cybersecurity regulations such as the CSA guidelines for Critical Information Infrastructure.