Director DevSecOps Engineer (Singapore/India)

Job Summary

This role could be based in Singapore and India. When you start the application process you will be presented with a drop down menu showing all countries, please ensure that you select a country where the role is based

• Provide senior individual contributor ownership across DevSecOps, Application Security, AI Security and Digital Assets Security capabilities, ensuring security controls are embedded into engineering, platform and emerging technology workflows.
• Drive practical security enablement across ADO/SNC workflow enhancements, security tooling integration, AI model onboarding security activities, SBOM and software supply chain security, automation and pilot-to-production transition.
• Partner with AI Factory, ADO Platform, Security Architecture, application and engineering teams to align delivery priorities, manage cross-functional dependencies and support secure, scalable adoption of AI, Digital Assets and application security capabilities across the Bank.

Key Responsibilities

Security capability ownership and delivery

• Own and deliver critical security capabilities across AI Security, Digital Assets Security, DevSecOps and Application Security, ensuring delivery is aligned to committed roadmap outcomes, OKRs and business-critical security priorities.
• Drive security tooling integration, automation and workflow improvements across engineering platforms, with a focus on reducing manual effort, improving risk visibility and strengthening secure delivery practices.

AI Security, Digital Assets and emerging technology enablement

• Support AI model onboarding security activities, AI governance enablement, MCP security controls, model security tooling integration and AI Factory engagement to help accelerate secure AI adoption.
• Enable Digital Assets security outcomes by supporting security assurance for blockchain, smart contract and emerging technology use cases, including shift-left controls and early risk detection.

DevSecOps, ADO/SNC workflows and software supply chain security

• Enhance ADO/SNC-based workflows and pipeline-integrated controls to support shift-left security, vulnerability management, issue traceability and consistent remediation across application teams.
• Support SBOM Manager expansion, software supply chain security, SCA/OSS governance and component risk visibility to improve prioritised remediation and strengthen resilience against supply chain vulnerabilities.

Stakeholder management, governance and operationalisation

• Engage senior stakeholders across AI Factory, ADO Platform, AI Safety, Security Architecture, Digital Assets, application and engineering teams to manage dependencies, unblock delivery issues and drive alignment on security priorities.
• Transition successful PoVs and pilots into sustainable operating models with clear ownership, adoption plans, evidence generation, service measures and BAU handover where applicable.
• Provide timely visibility of delivery risks, material control gaps, roadmap slippage and governance dependencies, escalating where required to protect business-critical security outcomes.

Motivations

• Energised by solving complex security problems at the intersection of engineering, automation, AI, Digital Assets and enterprise risk.
• Motivated to make security practical and consumable for delivery teams by embedding controls into existing developer, platform and governance workflows.
• Comfortable operating in a fast-moving environment with evolving technologies, senior stakeholders, cross-functional dependencies and a strong focus on measurable delivery outcomes.

Our Ideal Candidate

• 15+ years’ experience across software engineering, Application Security, DevSecOps or security engineering in large-scale enterprise environments, preferably including regulated financial services.
• Strong software development background with hands-on proficiency in Node.js, Java or Python, with the ability to review code, understand engineering patterns and translate security requirements into practical technical solutions.
• Strong experience in AI Security and emerging technology risk, including secure AI adoption, AI model onboarding, AI governance controls, model security assessment and tooling, LLM/VLM/ML security, MCP security and AI-enabled application risks.
• Proven ability to define and operationalise security guardrails for emerging technologies, working across AI Factory, AI Safety, Security Architecture, platform and application engineering teams.
• Strong hands-on experience embedding security controls into CI/CD pipelines and engineering workflows, preferably using Azure DevOps or an equivalent enterprise platform.
• Deep knowledge of secure SDLC and Application Security, including SAST, SCA/OSS, secrets detection, vulnerability management, remediation workflows and secure-by-design practices.
• Practical experience designing or integrating security automation and tooling across developer, platform and governance workflows, focusing on control effectiveness, risk visibility and developer experience.
• Sound understanding of software supply chain security, including SBOM, component risk, open-source governance and dependency remediation.
• Exposure to Digital Assets or blockchain security, including smart-contract security and associated technology risks, would be advantageous.
• Proven ability to evaluate and operationalise new security capabilities, taking initiatives from proof of value or pilot through production adoption and sustainable BAU ownership.
• Excellent stakeholder management and communication skills, with the ability to operate independently, manage cross-functional dependencies and influence senior stakeholders across security, engineering, architecture, risk and governance teams.
• Strong analytical and problem-solving skills, with the ability to manage ambiguity, balance competing priorities and provide clear, risk-based recommendations.
• Bachelor’s or Master’s degree in Computer Science, Cyber Security, Engineering or a related discipline, or equivalent relevant industry experience.
• Relevant certifications such as CISSP, CSSLP, CCSP, AWS/Azure security or architecture certifications are preferred but not mandatory.

Role Specific Technical Competencies

• AI Security and Emerging Technology Risk
• Software Development (Node.js, Java or Python)
• Application Security and Secure SDLC
• DevSecOps and CI/CD Security Automation
• Digital Assets and Blockchain Security
• Software Supply Chain Security and SBOM
• Security Tooling Integration and Automation
• Stakeholder Management and Delivery Governance

About Standard Chartered

We're an international bank, nimble enough to act, big enough for impact. For more than 170 years, we've worked to make a positive difference for our clients, communities, and each other. We question the status quo, love a challenge and enjoy finding new opportunities to grow and do better than before. If you're looking for a career with purpose and you want to work for a bank making a difference, we want to hear from you. You can count on us to celebrate your unique talents and we can't wait to see the talents you can bring us.

Our purpose, to drive commerce and prosperity through our unique diversity, together with our brand promise, to be here for good are achieved by how we each live our valued behaviours. When you work with us, you'll see how we value difference and advocate inclusion.

Together we:

• Do the right thing and are assertive, challenge one another, and live with integrity, while putting the client at the heart of what we do
• Never settle, continuously striving to improve and innovate, keeping things simple and learning from doing well, and not so well
• Are better together, we can be ourselves, be inclusive, see more good in others, and work collectively to build for the long term

What we offer

In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing.

• Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.
• Time-off including annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.
• Flexible working options based around home and office locations, with flexible working patterns.
• Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits
• A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning.
• Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.

Recruitment Assessments

Some of our roles use assessments to help us understand how suitable you are for the role you've applied to. If you are invited to take an assessment, this is great news. It means your application has progressed to an important stage of our recruitment process.

Visit our careers website www.sc.com/careers