Data Security Engineer

Role & responsibilities

Primary Skill set: Data Security :enterprise encryption, tokenization, or key management solutions

Cyprography,experence in Thales HSM

operations support 24x7

PURPOSE:

IT-TPS-ICS PROTECT is a critical function within Standard Chartered Bank operating under the overall purview of Technology Services” .

The IT-TPS-ICS PROTECT team is made up of cyber security thought leaders, who are accountable for the provision of a global set of cyber security services and products in order to maintain and continuously improve Bank’s cyber security posture in today’s ever evolving cyber security landscape.

The IT-TPS-ICS PROTECT team protect the Bank from cyber security threats by delivering effective information security technology services, managing and responding to security incidents to ensure, and support the continuity and growth of Bank’s business operations; and meet the both internal and external stakeholders’ expectations across 70+ countries and territories, in which SCB operates.

This requires a highly skilled and experienced Cyber and System Security leader to manage team and capability improve Bank’s IT security posture in order protect the Bank from complex cyber threats.

RESPONSIBILITIES:

Providing 24 x 7 supports for security in production systems as necessary to proactively protect the integrity, confidentiality, and availability of information of the company.

Take End to End ownership of Technology incidents and Requests in order to resolve them within agreed objectives and to the satisfaction of customers.

Ensure customer satisfaction through improved service and quality. All escalation timely responded and closed.

To build relationship & network with stakeholders.

Provide advanced technical support (Tier 2/3) for Thales CipherTrust, Fortanix SDKMS, Thales Vormetric, and Protegrity Data Security platforms in production environments.

Manage and maintain enterprise Key Management Systems (KMS) and Tokenization Services.

Perform encryption key lifecycle operations (Key generation, key rotation, key expiration, archival) ensuring compliance with security policies.

Work closely with internal CaaS onboarding teams/BAU team/PSS infra teams/ Cloud teams to integrate and support data encryption strategies.

Onboarding applications in Thales/Fortanix/Protegrity according to the business requirement in the Production environment to deliver the Encryption, Key management and Tokenization services across the bank.

Troubleshooting issues related to key access, encryption/decryption failures, and integration with applications (e.g. Oracle, MSSQL DB, PGSQL DB, Elastic DB, vSAN/Netapp/PowerTech/Hitachi storages).

Lead or participate in security audits, risk assessments, and compliance reporting.

Document processes, standard operating procedures (SOPs), and maintain detailed support runbooks.

Mentor junior engineers and provide training to internal teams on best practices for key management and tokenization.

COMPETENCIES (KNOWLEDGE & SKILLS):

Having bachelor’s degree in engineering, Computer Science / Information Technology or its equivalent.

Must have 5+ years of knowledge in supporting enterprise encryption, tokenization, or key management solutions.

8-9 years of relevant experience in IT; out of which at least 5 years’ experience in Data Security and manage complex Projects & Cyber Operations.

Good experience in Automating Manual task.

Possess strong decision making, communication and interpersonal skills.

Ability to work well autonomously and within a team environment & ability to work in weekends.

Hands-on experience with Thales CipherTrust Manager, Thales Vormetric including DSM configuration, tokenization vault setup and Transparent Encryption Agent management.

Proficiency with Fortanix DSM, including Rest API, TDE (Transparent Data Encryption), BYOK (Bring Your Own Key) & HYOK (Hold Your Own Key) scenarios.

Experience with Protegrity for tokenization, data masking, and centralized data protection policy enforcement.

Strong knowledge of cryptographic standards (AES, RSA, KMIP, PKCS) key lifecycle management.

Comfortable with Linux/Unix/Windows operation system administration and shell scripting.

Familiarity with cloud native KMS tools kike AWS KMS, Azure Key Vault, and Google Cloud KMS is a plus.

Familiarity with TLS/SSL, PKI, and secure API communication is a plus.

Excellent communication skills – oral, written and presentation; technical reporting writing across various types of target audiences.