Security Architect Enterprise - Guangzhou, 中国 - Standard Chartered Bank

描述

Role Responsibilities

We're looking for a Security Architect to work onsite within our brand-new Digital Bank. We're small right now, but a growing venture, with new and exciting problems to solve. We work in project-based sprints in small, interdisciplinary teams.

As a Security Architect, you'd be able to work on and solve some of the many interesting challenges we are facing, learn new ways of working, and build delightful high-quality products for our customers.

The role will sit in the engineering space and the person will be responsible for building secure infrastructure that runs our security products at the enterprise level. This includes evaluating, designing, developing, and implementing high quality engineering solutions for the bank. You'll be working within a global team on innovative technology.

We are looking for a result oriented, self-starter who can dive deep into core engineering solutions and think innovatively, but in a pragmatic way to engineer a highly available and secure Platform.

Regulatory & Business Conduct

• Display exemplary conduct and live by the Group's Values and Code of Conduct.

• Take personal responsibility for embedding the highest standards of ethics, including regulatory and business conduct, across Standard Chartered Bank. This includes understanding and ensuring compliance with, in letter and spirit, all applicable laws, regulations, guidelines and the Group Code of Conduct.

• Lead the [country / business unit / function/[team] to achieve the outcomes set out in the Bank's Conduct Principles: [Fair Outcomes for Clients; Effective Financial Markets; Financial Crime Compliance; The Right Environment.] *

• Effectively and collaboratively identify, escalate, mitigate and resolve risk, conduct and compliance matters.

Key stakeholders*

The Role Responsibility:

• Implement a state-of-the-art Enterprise Platform that is secure, compliant and resilient. Ensuring platform conforms to banks' security best practices and is fully consistent with Bank audit and compliance requirements and fully consistent with design ethos and technical requirements of external cloud providers.

• Identify processes that are manual and improve through automation.

• Ensure a full understanding of the risk and control environment within the Cloud organisation

• Ensure onboarding of technologies are done properly with Legal, Compliance and Security Teams

• Act quickly and decisively when any risk and control weakness become apparent and ensure they are addressed within an appropriate timeframe and, if necessary, escalated through the relevant committees

• Understand and comply with, in letter and spirit, all applicable laws, and regulations, including those governing anti-money laundering, terrorist financing, and sanctions; the Group's policies and procedures; and the Group Code of Conduct.

• Effectively and collaboratively identify, escalate, mitigate and resolve risk and compliance matters.

QUALIFICATIONS*
TRAINING, LICENSES, MEMBERSHIPS AND CERTIFICATIONS
Refer to myHR for further guidance

Our Ideal Candidate:

· 5 years of progressive Security experience with at least 3 years in delivering cloud security solutions and managing large scale infrastructure on the cloud
· Architect should be able to provide expert opinions & advisory on end-user computing (EUC) and Enterprise security architecture & design, compliance, and secure usage of Microsoft and EUC cloud services.
· Producing security architecture documents and strategies for Microsoft 365 security domains (IAM and RBAC, Data Security, Logging & monitoring).
· Working with our EUC vendors such as MDM, Microsoft to document best practice and drive change with the respective service owners (usually DWP team)
· Identify specific threats & mitigation controls for EUC such as laptops, Microsoft 365 components such as email, sharepoint etc. Will include working with internal pentesters and purple team to test security controls in the environments
· Knowledge and experience with security controls specific to MDM software (our stack is Microsoft Intune for Windows devices, and JAMF for MacOS, however experience with securing any MDM is fine).
· Pull out assessment reports for each application for the review and approval of CISO, Architecture Board, and System Owner.

Our Ideal Candidate

Solution Architecture