蚂蚁金服Ant International-Security Operations Lead-Anext Bank
任职要求
- BS/MS in Computer Science / Cybersecurity with 5 years and above relevant experience in security operations, incident response, or other cybersecurity roles; startup experience is a plus. - Proven track record of managing outsourced security services like SOC, MDR, or threat detection providers. - Experience solutioning and incorporating technical security controls align with industrial framework and regulatory requirements such as NIST CSF framework, MAS TRMG, MAS Cloud Advisory. - Experience in developing processes and playbooks for a growing organization. - Hands-on experience deploying, operating…
工作职责
- Lead the security operations function aligned with organizational goals and risks appetites, and collaborate with other security functional teams to enhance protection measures and overall security posture. - Develop and maintain the organization’s incident response playbooks and security operational runbooks. - Manage outsourced service providers, including intra-group outsourcing arrangements and other third-party vendors. Perform regular evaluations of vendor performance and oversee Service Level Agreements (SLAs). - Ensure high performance, accountability, and compliance from all outsourced providers while optimizing costs. - Lead the organization’s incident response efforts, working closely with internal teams and external partners during security events. - Conduct detailed investigations into security breaches and anomalous activities, and provide insights for remediation and improvement. - Communicate actionable insights and updates on the evolving threat landscape to relevant stakeholders. - Identify and implement new technologies, tools, and methodologies to enhance security operations efficiency and effectiveness. - Provide regular reporting to leadership and other functional heads on security operations metrics and trends.
Fraud Risk Lead acts as the strategic brain and face of fraud risk for the Bank, owning overall strategy, governance, analytics, and external touchpoints for all fraud related areas. This role will report in to the Chief Risk Officer. The Fraud Risk Lead will be responsible for executing and enhancing the Bank's fraud risk management framework, aligning with MAS guidelines and industry best practices. This role covers fraud strategy, governance, and analytics, while providing oversight to the fraud analysts handling day-to-day monitoring and prevention activities. • Define the fraud risk strategy, appetite, and policies in alignment with enterprise risk and regulatory expectations. • Establishing fraud risk governance forums, reporting dashboards, and KRIs for senior management/board oversight. • Ensure compliance with MAS guidelines and industry fraud standards. • Lead development of fraud detection rules, models, and analytics dashboards. • Conduct fraud trend analysis and horizon scanning to identify emerging threats. • Partner with data science/technology teams to deploy fraud rules/models. • Supervise fraud analysts covering onboarding reviews, transaction monitoring, and investigations. • Provide guidance on case escalation and regulatory reporting. • Act as key liaison with industry fraud forums, and law enforcement on fraud-related matters. • Coordinate with Regulatory Compliance to prepare and report to the regulator/ law enforcers as required. • Develop and provide fraud training for the Bank employees to promote fraud risk awareness and ensure relevant employees are trained on the fraud risk policy. • Define and propose risk management metrics to monitor the risk and control environment; and periodically report to the risk committees to support senior management in risk oversight and governance • Conduct fraud risk assessment on new products launch and processes change • Support internal and external audit engagements, and assessments like RCSA.
We are seeking a Business Solutions Engineer with a strong background in financial crime risk systems to drive the design, implementation, and optimization of our KYC (Know Your Customer), Fraud Detection, and Transaction Monitoring (TM) platforms. In this role, you will bridge the gap between business needs and technical solutions — translating regulatory requirements, operational workflows, and fraud risks into scalable, automated system designs. You’ll play a key role in ensuring our digital banking platform remains secure, compliant, and resilient against evolving threats. This is a high-impact position that sits at the intersection of product, technology, compliance, and security — ideal for someone passionate about building intelligent, data-driven risk systems in a fast-moving fintech environment. Lead the analysis and design of end-to-end solutions for KYC onboarding, ongoing customer due diligence, fraud detection, and real-time transaction monitoring systems. Work closely with internal engineering teams to integrate and customize platforms. Collaborate with Compliance, AML, Risk, Operations, and Product teams to gather functional and non-functional requirements. Map current and future-state processes for customer verification, risk scoring, alert investigation, and case management. Ensure system designs meet MAS, FATF, and other regulatory standards for customer identification, suspicious transaction reporting, and fraud prevention. Own end-to-end testing (SIT, UAT, production rollout) of new features and system enhancements. Validate detection efficacy, system performance, and integration with core banking and payment platforms.
1. Physical Security:• Develop and maintain physical security standards and procedures for all facilities.• Manage access control systems, surveillance technologies (CCTV), detection, and perimeter security.• Coordinate site risk assessments and implement corrective measures.• Oversee security contractors and ensure compliance with service-level agreements. 2. Security Operations Center (SOC):• Lead 24/7 monitoring of incidents, threats, and emergencies affecting personnel, facilities, and operations.• Manage incident reporting, escalation protocols, and real-time response coordination.• Ensure SOC integration with emergency services, crisis response, and business continuity teams.• Maintain incident tracking systems and dashboards with KPIs and performance reports. 3. EHS (Environment, Health & Safety):• Implement EHS programs aligned with local regulations and global standards.• Conduct safety audits, risk assessments, and compliance inspections.• Promote a safety culture through training, awareness campaigns, and best practice sharing.• Lead investigations of EHS-related incidents and ensure timely reporting and corrective actions. 4. Risk Management & Compliance:• Identify and assess security and safety risks across operations.• Ensure adherence to applicable laws, regulations, and industry best practices.• Develop and test emergency response plans, including fire drills, evacuation procedures, and crisis simulations. 5. Stakeholder Engagement & Reporting:• Prepare regular reports and presentations for senior leadership on security performance, incident trends, and risk posture.• Support cross-functional projects requiring security and safety input.
Join NVIDIA’s Security Team as Manager of our China Security Operations Center (SOC), safeguarding the discoveries that power AI, accelerated computing, autonomous machines, and gaming worldwide. Based in mainland China, you will lead analysts who detect, investigate, and contain threats. Your blend of technical depth and empathetic leadership will keep local operations fully aligned with PIPL and other relevant Chinese cybersecurity regulations while sharing intelligence with NVIDIA’s global defenses wherever lawful. Harnessing short Scrum cycles, you’ll drive rapid improvements—from tuning detections to automating playbooks—so every sprint delivers measurable risk reduction. If decisive action, analytical grit, and cross‑functional collaboration excite you, we invite you to craft the future of security at NVIDIA. Resilience emerges where clarity, speed, and trust converge! Ready to convert expertise into agile defenses that keep NVIDIA’s innovations safe?You lead with confident vitality, turning sophisticated threats into clear, time‑boxed objectives and empowering your team to act. Anchored in Agile values, you favor individuals and interactions, working solutions, and fast feedback—ensuring each sprint delivers customer value without sacrificing real‑time response. Data grounds your decisions, passion energizes partners, and steady support nurtures growth even as you set the standard. What you’ll be doing: • Guide, mentor, and develop SOC analysts in China, encouraging a high‑performance, inclusive culture. • Architect and continuously improve monitoring, detection, and response across on‑prem, hybrid, and multi‑cloud environments and protect GPU‑accelerated AI/ML pipelines. • Run the team in Scrum: facilitate planning, stand‑ups, reviews, and retrospectives; maintain a transparent backlog ordered by risk reduction and customer value. • Embed PIPL and other relevant Chinese cybersecurity regulations into day‑to‑day SOC processes, partnering with Legal and Compliance teams while supporting global collaboration where permissible. • Define, track, and act on metrics (MTTD, MTTR, sprint velocity) and operate staffing/on‑call schedules that balance 24 × 7 coverage with follow‑the‑sun hand‑offs. • Evaluate and integrate China‑compliant security tooling and automation, sharing threat intelligence and capabilities with the wider NVIDIA SOC as regulations allow.