Solution Architect (Cybersecurity)

About the role

OCBC is seeking a Solution Architect specialized in Cybersecurity to help shape the bank’s technology landscape. You will design and implement secure solutions that align with the enterprise strategy, regulatory requirements, and a zero‑trust approach across both on‑premise and cloud environments.

Key responsibilities

• Align solution design with enterprise strategy and risk appetite.
• Produce high‑level and detailed design artefacts, deployment architectures, and executable blueprints for network security, endpoint/EDR, SIEM/SOAR, DLP, key management/HSM, and PAM/IGA.
• Define and evolve security reference architectures, control standards, and hardening baselines mapped to frameworks such as NIST and ISO 27001.
• Lead architecture risk assessments, threat modelling, and governance of exceptions and technical debt.
• Embed with delivery and operations teams to ensure secure‑by‑default implementations, blue/green controls, and effective runbooks/incident‑response playbooks.
• Provide expert guidance and support to stakeholders throughout the solution lifecycle.

Required profile

• Strong ability to stay ahead of technology trends and translate business needs into secure architecture solutions.
• Proven experience collaborating with cross‑functional teams and influencing stakeholders.
• Deep domain expertise in identity‑centric security, zero‑trust, micro‑segmentation, encryption, secrets management, vulnerability and threat management, and DevSecOps.

Required skills

• Network security design
• Endpoint Detection and Response (EDR)
• Security Information and Event Management (SIEM) and Security Orchestration, Automation and Response (SOAR)
• Data Loss Prevention (DLP)
• Hardware Security Module (HSM) and key management
• Privileged Access Management (PAM) and Identity Governance & Administration (IGA)
• Zero‑trust architecture, micro‑segmentation, encryption, secrets management
• Vulnerability and threat management, DevSecOps practices
• Framework knowledge: NIST, ISO 27001