Non-Human Identity Security Engineer (AVP/VP), CISO
Oversea-Chinese Banking Corporation Limited4 days ago
Singapore, SingaporeStaff+
Responsibilities
- Build and maintain discovery and inventory of non-human identities, including service accounts, API credentials, workload identities, and AI agents.
- Map non-human identities to accountable owners and manage the lifecycle of credentials, tokens, certificates, and SSH keys.
- Use PKI, certificate lifecycle data, and SSH key inventories to identify weak, unmanaged, or expiring credentials and drive remediation.
- Operate non-human identity and agent lifecycle controls on the identity governance and administration platform.
- Build and maintain senior-leadership dashboards for privileged-account coverage, credential rotation compliance, non-compliant accounts, account lifecycle, and non-human identity owner coverage.
- Turn identity and privileged-access telemetry into trend analysis, anomaly detection, and risk indicators.
- Help develop security controls and governance for agentic AI identities as the Group’s AI platforms mature.
Requirements
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Data Engineering, or a related field, or equivalent practical experience.
- At least 7 years of relevant experience for AVP or 10 years for VP in security engineering, identity engineering, privileged access management, or security analytics.
- At least 3 years of relevant hands-on experience for AVP or 5 years for VP in non-human identity, machine identity, secrets management, or privileged access.
- Hands-on experience discovering, inventorying, owning, rotating, and expiring service accounts, API keys, tokens, certificates, and SSH keys.
- Working knowledge of PKI, certificate lifecycle management, SSH key management, and cloud workload identities such as managed identities and service principals.
- Working knowledge of API and token security using OAuth, OIDC, or similar standards.
- Understanding of privileged-access concepts including account lifecycle, credential vaulting and rotation, least privilege, just-in-time access, and session monitoring.
- Hands-on skills in data analysis and modelling, SQL, Python, pipeline automation, and dashboard construction.
- Ability to communicate technical risks and data findings clearly to senior non-technical stakeholders.
- Familiarity with agentic AI identity risks or a clear interest in developing expertise in this area.
- Preferred experience with IDIRA Enterprise Password Vault and Secrets Manager, cloud-native secrets management, CI/CD pipeline security tooling, log analytics, and dashboard platforms such as Power BI.
- Familiarity with AWS Bedrock and Microsoft Copilot Studio is preferred.
- CISSP, CCSP, cloud security, identity, or data certifications are valued but not mandatory.
Benefits
- Competitive base salary.
- Holistic, flexible benefits to suit different lifestyles.
- Community initiatives.
- Industry-leading learning and professional development opportunities.
- Wellbeing, growth, and professional development support.
About Oversea-Chinese Banking Corporation Limited
Oversea-Chinese Banking Corporation (OCBC) is a Singapore-headquartered bank founded in 1932 that provides consumer, corporate, investment, and transaction banking, plus wealth and private banking, insurance, asset management, and stockbroking. It serves retail customers, SMEs, and large enterprises across key markets including Singapore, Malaysia, Indonesia, and Greater China. OCBC is publicly listed on the Singapore Exchange and operates subsidiaries such as Bank of Singapore, Great Eastern, Lion Global Investors, OCBC NISP, and OCBC Wing Hang.