{"id":3794723,"url":"https://alion.io/job/julius-baer-team-head-cyber-security","title":"Team Head Cyber Security","company":{"id":3384,"name":"Julius Baer","domain":"juliusbaer.com","url":"https://alion.io/company/juliusbaer","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":79,"open_postings":26,"ghost_share":0,"stale_share":0.846,"repost_share":0,"time_to_fill_p50_days":31,"computed_at":"2026-11-09T06:03:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false}],"status":"live","first_seen_at":"2026-11-05T00:00:00Z","employer_posted_date":null,"last_verified_at":"2026-11-05T00:00:00Z","board_verified":false,"closed_at":null,"days_open":5,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":5},"description":"GENERAL DESCRIPTION \nThe CRO division develops and oversees the global framework for risk identification, control, reporting, and management within the risk tolerance for the various business activities for Julius Baer.\nThe incumbent is responsible for supporting the global Cyber Fusion Center in executing security operations, threat intelligence, and detection engineering. This means providing the needed support in developing, driving, and managing Cyber Defence activities in the Bank. \nAs part of the Risk Management function in the Bank, the incumbent will need to work closely with IT, Corporate Services or other relevant functions to ensure that cyber risks are highlighted, mitigated, and remediated appropriately.\nKEY FEATURES \nLeadership and management\n· Thrive as a team leader, managing security analysts in Singapore.\n· Act as line manager with proven people-leadership experience, fostering development, performance and engagement within the team.\n· Ensure appropriate ethical and compliant behaviour within the area of responsibility by clear demonstration of appropriate values and behaviours.\n· As representatives of CRO, sets an example in terms of risk awareness and integrity\nDetection engineering and architecture\n· Lead the global engineering stream of the Cyber Fusion Center, being ultimately responsible for the architecture and coverage of the detection and response capabilities of the Bank\n· Define and manage the architecture and operational aspects of the Security Information and Event Management (SIEM) solution, GUI development, dashboarding, and detection engineering\n· Plan resources and financial aspects with regards to building a threat-oriented detection engineering and testing (quality assurance for detections) framework based on MITRE Att&ck\n· Integrate third-party systems and Software-as-a-Service (SaaS) solutions into the SIEM and Security Orchestration, Automation, and Response (SOAR) ecosystem\n· Support the engineering stream in developing and maintaining detections where applicable\nAutomation and Innovation\n· Drive automation in incident response processes and playbooks, automating detection and response workflows\n· Introduce Artificial Intelligence capabilities to support analysts and reduce the meantime to respond to a minimum\n· Support the engineering stream in automated attack simulation testing\nFlagship project delivery\n· Lead flagship projects such as SOC 3.0, Insider Threat, Deception Management, Network Detection and Response (NDR), and more as a business project leader, defining requirements and maintaining overall oversight to ensure value is delivered\nRegional cyber oversight and stakeholder engagement\n· Collaborate with global, regional, and local stakeholders to effectively manage cyber risk matters, and communicate risk insights, control requirements, and key issues to senior management and other stakeholders\n· Engage with regulators where required, ensuring alignment with regulatory expectations and requirements\n· Oversee the smooth operation of Security Operations Center (SOC) and Cyber Threat Intelligence (CTI) resources in Asia, ensuring adequate coverage and operational readiness\n· Coordinate with stakeholders in the Bank, vendors, and service providers to anticipate new developments relevant to the Cyber Fusion Center that require adoption\n· Exchange knowledge and best practices with industry peers\nSKILLS REQUIREMENTS \nPersonal and social\n· Excellent communication and collaboration skills to work effectively with cross-functional, international teams\n· Strong interpersonal, communication, and presentation skills\n· Self-driven and able to work independently to drive initiatives and tasks\n· Resilient and able to perform effectively under pressure in a fast-paced operational environment, particularly during active incident response\n· Willingness to take responsibility\n· Strong organisational and prioritisation skills, with the ability to deliver results within tight deadlines\nProfessional and technical\n· Bachelor's degree or higher in Cybersecurity, Information Technology, or a related discipline\n· Proven experience in leading people as a line manager\n· Proven experience in defining and managing the architecture and operational aspects of a SIEM solution and detection engineering\n· Expertise with Splunk, Palo Alto XSIAM/XDR, and MS Azure is a plus\n· Experience with AI, in particular generative AI, is a plus\n· Strong understanding of cyberthreat landscapes and the ability to proactively address emerging threats\n· Proven experience in security operations, threat analysis, and incident response within the banking or financial services industry, preferably in Wealth Management\n· Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Splunk certifications are a plus\n· Knowledge of security frameworks such as MITRE Att&ck\nSkills\nAi, Microsoft Azure, Security Administration, Splunk, banking industry, Collaboration, Interpersonal Skills, Cross Functional Team Building, Threat Management, Cybersecurity, Generative AI, CISM","description_format":"text","description_chars":5134,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Commercial & Retail Banks","Wealth Management & Financial Advisors","Information Security"],"lifecycle":[{"event":"open","at":"2026-11-05T08:31:15Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":4,"expected_fill_days":31,"reasons":["seen:4","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-09T06:03:00Z"},"pay":null,"html_url":"https://alion.io/job/julius-baer-team-head-cyber-security","json_url":"https://alion.io/job/julius-baer-team-head-cyber-security.json","meta":{"generated_at":"2026-11-10T05:27:32Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12698,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3384},"rest":"https://alion.io/mcp/rest/get_company?id=3384"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fjulius-baer-team-head-cyber-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fjulius-baer-team-head-cyber-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fjulius-baer-team-head-cyber-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/julius-baer-team-head-cyber-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fjulius-baer-team-head-cyber-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3794723}},{"tool":"search_jobs","arguments":{"company":"juliusbaer.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3794723},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}