Job responsibilities

• Leverages tools and emerging technology to lead the execution of technical risk assessments at a large scale across the Asia Pacific technology estate of applications, including but not limited to; applications having connectivity to local exchanges and financial markets infrastructures.
• Uses enterprise-authorized AI capabilities within the work environment to accelerate cybersecurity risk analysis and control assessment, validating outputs and handling data according to sensitivity and security requirements.
• Guides the evaluation of current cybersecurity principals, processes, and controls, and leads the evaluation of new technology using existing standards and frameworks
• Regularly provides technical guidance and direction to support the business and its technical teams, contractors, and vendors 
• Works with stakeholders and senior leaders to recommend business modifications during periods of vulnerability
• Serves as function-wide subject matter expert in one or more areas of focus  
• Actively contributes to the engineering community as an advocate of firmwide frameworks, tools, and practices of the Software Development Life Cycle 
• Influences peers and project decision-makers to consider the use and application of leading-edge technologies 
• Drives reuse-first adoption of AI-assisted security validation within SDLC/toolchain routines, improving control testing, remediation quality, and traceability/auditability in line with resiliency expectations.

Required qualifications, capabilities, and skills

• Bachelor’s Degree in Computer Science or related disciplines
• 5+ years of experience or equivalent expertise in technology risk management, information security, or a related field, with a focus on managing risk identification, assessment, and mitigation.
• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support cybersecurity architecture workflows with strong validation habits and awareness of data sensitivity.
• Ability to assess and validate AI-assisted security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations.
• Hands-on practical experience delivering enterprise level cybersecurity solutions and controls
• Advanced in one or more programming languages or applications 
• Advanced knowledge of cybersecurity architecture, applications, and technical processes with considerable, in-depth knowledge in one or more technical disciplines (e.g., public cloud, artificial intelligence, machine learning, mobile, etc.)
• Ability to tackle design and functionality problems independently with little to no oversight 
• Demonstrated hands-on experience architecting, deploying, and securing cloud-native solutions across major platforms (e.g., AWS, Azure, GCP), with a focus on integrating security controls and best practices into cloud environments.
• Ability to evaluate current and emerging technologies to select or recommend the best solutions for the future state architecture

• Relevant industry certifications in cybersecurity (such as CISSP, CISM, CCSP, or equivalent), reflecting a commitment to continuous professional development and validated expertise in the field.

   

• Familiarity with risk management frameworks, industry standards, and financial industry regulatory requirements
• In-depth knowledge of the financial services industry and their IT systems
• Proficient knowledge and expertise in data security, risk assessment & reporting, control evaluation, design, and governance, with a proven record of implementing effective risk mitigation strategies.

#CTC