SVP, DevSecOps Lead

Consultant:

Chen Yi Ooi

Job Reference No.

Registration No.

R1876389

License No.

16S8060

Function

Cybersecurity & GRC

Our client is an established enterprise operating complex, always-on technology platforms. It is seeking a senior engineering leader to shape and scale secure software delivery, platform engineering and automation across the organisation.

This role combines strategy with technical execution. You will define engineering guardrails, lead high-impact transformation initiatives and work across application, cloud, infrastructure, security and risk teams to improve delivery speed, resilience and control effectiveness.

Key Responsibilities:

Set the direction and engineering standards for DevSecOps, platform engineering, secure software delivery and enterprise automation.
Design reusable patterns and guardrails for CI/CD pipelines, infrastructure as code, policy as code and compliance automation.
Strengthen developer experience through self-service capabilities, standardised toolchains, reference architectures and well-governed delivery pathways.
Embed security throughout the software development lifecycle, including code and dependency scanning, application testing, container security, secrets management and vulnerability remediation.
Lead the evolution of cloud and platform capabilities across environments, with a focus on scalability, reliability, observability and operational readiness.
Apply workflow automation and agentic AI to reduce engineering toil, improve control evidence collection and support delivery, security and operational processes.
Provide senior technical input on solution design, security architecture and threat modelling for new platforms, products and material technology changes.
Own major programmes and workstreams end to end, including delivery milestones, risks, dependencies, resource priorities and updates to senior stakeholders.
Establish pragmatic governance for engineering tools and platforms, balancing innovation, control requirements and long-term maintainability.
Coach engineering teams and build a strong community of practice across DevSecOps, automation and platform engineering disciplines.

Requirements:

Extensive experience in DevSecOps, platform engineering, security engineering or a related technology leadership role within a complex, high-availability environment.
A strong record of leading enterprise-scale engineering initiatives, influencing cross-functional teams and remaining accountable for measurable outcomes.
Deep practical knowledge of secure SDLC practices, CI/CD, SAST, DAST, software composition analysis, container security, secrets management and automated controls.
Hands-on familiarity with modern engineering and cloud technologies such as GitLab CI/CD or Jenkins, Terraform, Docker, Kubernetes, AWS, Azure or GCP.
Working knowledge of scripting and automation using Python, Bash or PowerShell, together with observability and monitoring platforms.
Sound understanding of identity and access management, encryption, secure configuration, vulnerability management and incident response.
Familiarity with recognised security and engineering standards, including OWASP, NIST and CIS Benchmarks; experience in a regulated environment would be advantageous.
Strong judgement, communication and stakeholder-management skills, with the confidence to challenge constructively and translate technical priorities into business outcomes.
A degree in Computer Science, Engineering, Information Security or a related discipline. Relevant cloud, security, DevOps or architecture certifications would be beneficial.

To apply:

If you’re interested to apply or find out more, please share across your CV or reach out to Chen Yi at cy@kerryconsulting.com for a discussion. Due to anticipated high volume of applications, we regret to inform that only shortlisted candidates will be notified.

Reg: R1876389
Lic: 16S8060

Apply for this position

Head of Business Information Security & Cyber Risk

Our client is a leading multinational organisation with an established presence globally. As part of its continued investment in cybersecurity, the organisation is looking for an experienced security...