VP, Security Engineering

We are seeking an experienced Security Engineering leader to drive the design, build, and continuous enhancement of enterprise security capabilities across the organisation’s technology landscape. This role will be responsible for translating cybersecurity strategy into scalable, engineering-led solutions, with a strong emphasis on core security domains such as Identity and Access Management (IAM), Cryptographic Key Management, Zero Trust Architecture, Security Hardening, Data Loss Prevention (DLP), and Cloud Security.

Tanggung jawab:

• Lead the design, engineering, and implementation of enterprise security solutions, with deep ownership across domains including IAM, cryptographic key management, Zero Trust architecture, security hardening, DLP, and cloud security controls.
• Drive the adoption of Zero Trust principles across identity, network, and application layers, ensuring least privilege access and strong authentication mechanisms.
• Oversee and enhance identity and access management capabilities, including SSO, MFA, PAM, and fine-grained access controls (RBAC/ABAC).
• Design and implement robust cryptographic and key management frameworks, ensuring secure handling of keys, certificates, and secrets across environments.
• Strengthen data protection capabilities, including data classification, encryption, and DLP controls across endpoints, networks, and cloud platforms.
• Establish and enforce security hardening standards and baseline configurations across infrastructure, endpoints, and cloud environments.
• Lead cloud security engineering efforts, including CSPM, container security, workload protection, and secure cloud architecture patterns.
• Drive the integration of security into DevSecOps pipelines, ensuring application security testing (SAST/DAST), secrets management, and secure deployment practices are embedded.
• Partner with enterprise architecture and engineering teams to ensure security controls are embedded into platform design and technology standards.
• Lead proof-of-concept (PoC) and proof-of-value (PoV) initiatives to evaluate and implement emerging security technologies.

Persyaratan:

• Bachelor’s degree in Computer Science, Information Security, Engineering, or related discipline.
• 8-15 years of experience in cybersecurity, with strong focus on security engineering across multiple domains within banking or regulated environments.
• Proven expertise across key cybersecurity domains, including:
  • Identity and Access Management (IAM) – SSO, MFA, PAM, RBAC/ABAC
  • Cryptographic Key Management – KMS, HSMs, certificate and secrets management
  • Zero Trust Architecture – identity-centric security, micro-segmentation
  • Security Hardening – OS, network, and cloud baseline configurations
  • Data Loss Prevention (DLP) and data protection strategies
  • Cloud Security – CSPM, CWPP, container and workload security

Untuk mendaftar:

If you’re interested to apply or find out more, please share across your CV or reach out to Chen Yi via LinkedIn or at cy@kerryconsulting.com for a discussion. Due to the confidential nature of this search, we regret to inform that only shortlisted candidates will be notified.

Reg: R1876389
Lic: 16S8060