Job Description

Job Title: Associate Cloud Security Architect

ROLE PURPOSE :
Analyse and design the Bank\'s cloud security reference architecture, produce design security
baselines for implementation of IT security controls, and ensure effectiveness of the controls in the
IT infrastructure and systems to safeguard the Bank\'s IT and Cloud environment from internal and
external security threats in maintaining confidentiality, integrity and availability of information assets
in the Bank.




INTERCHANGEABLE/FEEDER
JOBS:
Architects, Application development and support/ project managers/
RSFG/ CSD teams or other line depts. with security infrastructure knowledge.


PRINCIPAL ACCOUNTABILITIES :

• Assist in the design, implementation and integration phases of business products and services to meet business security requirements, address corporate risks and exposures in cloud-based solutions
• Provide control and risk assessment and threat modelling analysis of solutions in order to recommend appropriate security requirement that balance between business operation and security.
• Identify, assess, analyse, recommend, and develop new cloud security standard, guidelines and procedures
• Serve as a cloud security subject matter expert during discussions and meetings with key stakeholders within the business unit and infrastructure teams
• Build and maintain operational and tactical relationship/networking and collaborations with external IT security expert and other IT organisations in order to benchmark and improve the Bank\'s IT security infrastructure service delivery to the stakeholders.
• Provide IT security advisory services on IT solution architecture and design proposals to ensure solution meets the IT security requirements as to safeguard the Bank\'s IT infrastructure and systems
• Perform threat modelling on the cloud-based scenarios and able to apply the principles to secure the cloud platforms
• Interact with peers, project teams, technical specialists, and other senior members of the company to provide advice on cloud security and identity-related security. Provide technical security expertise, including communicating architectural security decisions, benefits, risks, and other activities including security requirement definition, and facilitation of security testing and management of residual risk with the product or application teams.

CRITICAL SUCCESS FACTORS :

• Ability to keep abreast of cybersecurity threats and

understand the business impacts and recommend
mitigation plans to address the cybersecurity risks.

• Response management processes and recovery plans

for detecting, identifying, analysing and reporting of
cybersecurity-related events to ensure timely
identification of threats and implementation of the
proactive and corrective actions.



CHALLENGES

• Ability to ensure cybersecurity risks are addressed in the

adoption of new technology (e.g. Cloud Services, BYOD)

• To balance the implementation of new business solutions

with the needs to protect the Bank\'s information assets
and to educate business users on cybersecurity control
awareness