Kerja Sepenuh Masa, Director, Security Engineering di Sumitomo Mitsui Banking Corporation - Maukerja

As a Security Engineering Professional, you will play a critical role in strengthening our organization’s security posture by planning, designing, and implementing comprehensive security measures aligned with business goals, regulatory standards, and industry best practices. You will be responsible for the coordination of regional security initiatives, engage with vendors and stakeholders, and ensure adherence to security policies and frameworks. This role requires a proactive, detail-oriented individual with strong technical expertise and excellent communication skills to drive continuous improvement and maintain a secure operating environment.

Job Responsibilities

• Drive the transformation of security architecture and engineering capabilities, elevating organizational maturity across cybersecurity, infrastructure, networks (on-premises and cloud), applications, data and AI platforms.
• Manage the delivery of vital security projects and initiatives, including vendor coordination, stakeholder engagement, deliverable oversight, and milestone tracking to ensure successful execution.
• Establish and implement cybersecurity architectural governance, standards, and review processes across all technological initiatives, including architecture reviews, and design assessments to ensure compliance with regulatory requirements and security policies.
• Plan, evaluate, design, implement, operationalize, maintain, and upgrade security controls in alignment with business objectives, regulatory requirements, and frameworks such as NIST and CRI.
• Strengthen operational performance by fostering accountability and service enhancement within cybersecurity functions, as well as establishing robust cross-functional partnerships to align stakeholders and establish shared ownership of outcomes.
• Establish, enforce, and continuously refine security processes, standards, and best practices to ensure robust controls and high-quality service delivery.
• Formulate and execute remediation plans addressing identified vulnerabilities, ensuring solutions meet defined security criteria and integrate seamlessly with existing systems.
• Investigate security incidents and provide actionable recommendations to mitigate risks and enhance security protocols.
• Collaborate with auditors and assessors to facilitate timely, comprehensive security audits and compliance assessments.
• Communicate cybersecurity risks, mitigation plans, and program updates clearly and effectively to stakeholders, fostering alignment with organizational security goals.
• Perform additional duties assigned to support and advance the cybersecurity function.

Job Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, or a related field.
• Minimum of 15 years’ professional experience, including at least 10 years in IT cybersecurity or related roles.
• Strong expertise in enterprise security architecture frameworks, cloud security, application security, and data protection.
• Proven experience designing and implementing secure architecture in large-scale, regulated environments (preferably financial services).
• Strong background cloud engineering and security (e.g., Azure, AWS) and modern infrastructure environments. The possession of pertinent professional certifications (e.g., CISSP, CISM, or CRISC, SABSA, TOGAF, Cloud Security) are highly desirable.
• Comprehensive understanding of security principles, techniques, technologies, and enterprise security architecture frameworks.
• Extensive experience in cybersecurity, data protection, regulatory compliance, and adherence to industry standards.
• Excellent analytical and problem-solving skills with the ability to manage multiple priorities effectively in a fast-paced environment.
• Strong communication skills, including technical writing and documentation proficiency.