Business Function
Group Technology and Operations enables and empowers the Bank with an efficient, nimble, and resilient infrastructure through a focus on productivity, quality and control, technology, people capability, and innovation.
Job Summary
We are seeking an experienced and technical cybersecurity professional to join our team dedicated to migrating critical applications and infrastructure to Post-Quantum Cryptographic (PQC) algorithms.
The successful candidate will serve as a key technical leader for our cryptographic transition strategy, ensuring strict compliance with regulatory (e.g., CSA, MAS) timelines while simultaneously embedding "crypto-agility" into our long-term technology governance. This role requires managing complex stakeholder relationships across senior management, internal engineering squads, and external technology vendors to safeguard the bank against the emerging risks of Cryptographically Relevant Quantum Computers (CRQC).
Key Responsibilities
- Define and execute a robust multi-year PQC migration roadmap, ensuring all key milestones—specifically regulatory and supervisory compliance deadlines—are met rigorously.
- Develop and champion a long-term framework for crypto-agility, enabling the bank to rapidly adapt to evolving cryptographic standards without major infrastructure disruption.
- Provide regular, high-level briefings and progress reports to senior management regarding risk postures, milestones, resource allocation, and regulatory compliance statuses.
- Partner closely with the Risk Management Group, Technology Risk Management, Enterprise Architecture, Site Reliability Engineering (SRE), Infrastructure, and Application Development teams to identify vulnerable assets (e.g., VPNs, authentication services, network protocols) and oversee the transition to NIST-approved post-quantum algorithms (e.g., ML-KEM, ML-DSA).
- Collaborate with external technology suppliers, hardware vendors, and industry working groups to influence product roadmaps and ensure third-party compliance with quantum-safe requirements.
- Provide ongoing guidance for defining, updating, and governing enterprise standards and guidelines on secure cryptography usage.
Requirements
- Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Cryptography, or a related discipline, with a minimum of 10 years of experience in enterprise-level cybersecurity focusing heavily on cryptography, Public Key Infrastructure (PKI), or security architecture.
- Deep understanding of traditional cryptographic algorithms (RSA, ECC, AES, SHA) and the ongoing transition to NIST-standardized quantum-resistant algorithms (ML-KEM, ML-DSA, SLH-DSA).
- Hands-on experience with applied cryptography, Hardware Security Modules (HSMs), cryptographic key management, and the software/hardware security lifecycle.
- Proven experience navigating cybersecurity regulations and compliance standards (e.g., CSA guidelines for Critical Information Infrastructure).
- Exceptional ability to translate complex technical and cryptographic risks into clear business impacts for executive-level communication.
- Demonstrated success in leading cross-functional technical task forces or large-scale transformation programs, alongside strong negotiation skills when dealing with external technology vendors.
Location:
DBS Asia Hub
Job:
Technology
Schedule:
Regular
Employee Status:
Full time
