Head, Cyber Fusion Center Asia

GENERAL DESCRIPTION

The CRO division develops and oversees the global framework for risk identification, control, reporting, and management within the risk tolerance for the various business activities for Julius Baer.

The incumbent is responsible for supporting the global Cyber Fusion Center in executing security operations, threat intelligence, and detection engineering. This means providing the needed support in developing, driving, and managing Cyber Defence activities in the Bank.

As part of the Risk Management function in the Bank, the incumbent will need to work closely with IT, Corporate Services or other relevant functions together with the Head of Cyber Fusion Center Asia to ensure that cyber risks are highlighted, mitigated, and remediated appropriately.

KEY FEATURES AND ACCOUNTABILITIES

Leadership and management

· Thrive as a team leader, managing security analysts in Singapore.

· Act as line manager with proven people-leadership experience, fostering development, performance and engagement within the team.

· Ensure appropriate ethical and compliant behaviour within the area of responsibility by clear demonstration of appropriate values and behaviours.

· As representatives of CRO, sets an example in terms of risk awareness and integrity

Detection engineering and architecture

·  Lead the global engineering stream of the Cyber Fusion Center, being ultimately responsible for the architecture and coverage of the detection and response capabilities of the Bank

·  Define and manage the architecture and operational aspects of the Security Information and Event Management (SIEM) solution, GUI development, dashboarding, and detection engineering

·  Plan resources and financial aspects with regards to building a threat-oriented detection engineering and testing (quality assurance for detections) framework based on MITRE Attack

·  Integrate third-party systems and Software-as-a-Service (SaaS) solutions into the SIEM and Security Orchestration, Automation, and Response (SOAR) ecosystem

·  Support the engineering stream in developing and maintaining detections where applicable

Automation and innovation

·  Drive automation in incident response processes and playbooks, automating detection and response workflows

·  Introduce Artificial Intelligence capabilities to support analysts and reduce the meantime to respond to a minimum

·  Support the engineering stream in automated attack simulation testing

Flagship project delivery

·  Lead flagship projects such as SOC 3.0, Insider Threat, Deception Management, Network Detection and Response (NDR), and more as a business project leader, defining requirements and maintaining overall oversight to ensure value is delivered

Regional cyber oversight and stakeholder engagement

·   Collaborate with global, regional, and local stakeholders to effectively manage cyber risk matters, and communicate risk insights, control requirements, and key issues to senior management and other stakeholders

·   Engage with regulators where required, ensuring alignment with regulatory expectations and requirements

·   Oversee the smooth operation of Security Operations Center (SOC) and Cyber Threat Intelligence (CTI) resources in Asia, ensuring adequate coverage and operational readiness

·   Coordinate with stakeholders in the Bank, vendors, and service providers to anticipate new developments relevant to the Cyber Fusion Center that require adoption

·   Exchange knowledge and best practices with industry peers

SKILLS REQUIREMENTS

Personal and social

·  Excellent communication and collaboration skills to work effectively with cross-functional, international teams

·  Strong interpersonal, communication, and presentation skills

·  Self-driven and able to work independently to drive initiatives and tasks

·  Resilient and able to perform effectively under pressure in a fast-paced operational environment, particularly during active incident response

·  Willingness to take responsibility

·  Strong organisational and prioritisation skills, with the ability to deliver results within tight deadlines

Professional and technical

·  Bachelor's degree or higher in Cybersecurity, Information Technology, or a related discipline

·  Proven experience in leading people as a line manager

·  Multiple years of proven experience in defining and managing the architecture and operational aspects of a SIEM solution and detection engineering

·  Expertise with Splunk, Palo Alto XSIAM/XDR, and MS Azure is a plus

·  Experience with AI, in particular generative AI, is a plus

·  Strong understanding of cyberthreat landscapes and the ability to proactively address emerging threats

·  Proven experience in security operations, threat analysis, and incident response within the banking or financial services industry, preferably in Wealth Management

·  Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Splunk certifications are a plus

·  Knowledge of security frameworks such as MITRE Attack

·  Fluent in English and German; other languages are an advantage