Job Description

Company Description

RHB Singapore is a progressive and growing financial organization. We are committed to creating a fulfilling, dynamic and engaging work environment for our team of more than 15,000 employees across locations in ASEAN.



Primary Objective

Cloud Specific

• Ensure IT operations and performance of IT systems hosted on the cloud to ensure operational effectiveness and efficiency
• Ensure new application/systems development/platform acquisitions hosted on the cloud are able to meet evolving Singapore Operation's needs
• Ensure cloud infra and workload running on the cloud infra is operated in a manner that complies with Bank Policies and frameworks, standards, circulars, guidelines and MAS regulated act, notices, circulars, and guidelines applicable to technology (Compliance, Audit, Risk Adherence).
• Ensure IT assets of cloud infra and workloads hosted on the cloud infra are protected and secure
• Contribute in the annual budgeting related to cloud infra and then effective usage and spend within budget the Capital and Operational expenditures
• Be a key stakeholder and technology partner on the bank Digital journey.
• Be a lead to ensure a strong and competent cloud engineer team.
• Foster and champion bank PRIDE values within the technology department and imbue the department with a culture of teamwork, innovation, discipline, resiliency and dedication to how work is approached.
• Ensure all Cloud hosted application deployments running on bank managed environments are properly QA and meet conditions.
• Manage test environments on Cloud to ensure business can do their enhancements and new projects testing
• Promote, mentor, champion and assist technology department on their journey.

Platform

• Maintain and ensure infra components running in production are in a healthy state;
• Analyze and recommend new infra component acquisitions to meet evolving Singapore Operation's needs;
• Ensure IT is operated in a manner that complies with Bank Policies and frameworks, standards, circulars, guidelines and MAS regulated act, notices, circulars, and guidelines applicable to technology (Compliance, Audit, Risk Adherence). - Infra components Ensure IT assets are protected and secure - Infra components
• Assist in annual budgeting - Infra components
• Be a key stakeholder and technology partner on the bank Digital journey.
• Foster and champion bank PRIDE values within the technology department and imbue the department with a culture of teamwork, innovation, discipline, resiliency and dedication to how work is approached.
• Provide day-to-day support for infra components
• Participate in the setup of test environments to ensure business can do their enhancements and new projects testing for assign applications.
• Middleware, DB: Middleware (IBM HQ, Oracle Weblogic, Redhat JBOSS, ICBA JHIT), DB (SQL Server, Oracle RDBMS, MySQL, PostgreSQL, AWS Dynamo DB, AWS RDS / Aurora, AWS Redshift, MongoDB)

Key Responsibilities

Strategy, Planning, Mgmt. Reporting

• Provide expert advice and support to technology management in the area of Cloud and DevOps expertise
• Contribute in the formulation a comprehensive Branch IT strategy covering IT policies and procedures, security, architecture, business solutions and operational functional requirements
• Keep abreast of developments and innovations in the FI IT landscape with a focus on Cloud and DevOps
• Provide mentorship, support and guidance to colleagues, share information and facilitate problem solving Contribute in the yearly budgeting for IT expenditures and investments.

Cloud Infra and Platforms (Cloud and non Cloud) Operations

• Oversee performance monitoring of systems to ensure outstanding operational effectiveness at low operating costs - Cloud infra and both Cloud and non-Cloud for DB, Middleware components
• Ensure prompt and efficient provision of IT support - Cloud infra and both Cloud and non- Cloud for DB, Middleware components
• Oversee contingency plans and ensure their adequacy - Cloud infra and both Cloud and non-Cloud for DB, Middleware components
• Ensure IT assets are protected and secure - Cloud infra and both Cloud and non-Cloud for DB, Middleware components
• Ensure IT operations run in a manner consistent with high score from audit, risk, compliance assessments. The following to be operationalized as standard procedure against all IT asset components - Cloud infra and both Cloud and non-Cloud for DB, Middleware components.:

• Administrative Accounts - All admin accounts lodged into PAM solution per group IT Security guidelines and MAS notice 655 point 4.1
• Patching - Patch notification process established with vendors and patch calendar updated, upon patch release assessment and implementation as needed Per patching guidelines and MAS notice 655 point 4.2
• Hardening - Per component definition and enforcement against SG security standard and Group IT Security guidelines and SG addendum/s and MAS notice 655 point 4.3
• Network Perimeter Defense - Network traffic and segments, firewalls, proxies, dns, vpn access setup in secure manner per group IT security guidelines and MAS notice 655 4.4
• Malware - IT Security consulted and all required IT security protections installed on IT assets per MAS notice 655 point 4.5
• Multi-factor Authentication - MFA, where applicable implement MFA of administrative and internet accounts with access to customer information using PAM per MAS notice 655 point 4.6
• Logging and Monitoring - Security, Capacity, Downtime, Audit
• Capacity Mgmt. - Pre-emptive monitoring (via monitoring), planning and execution of capacity upgrades as needed
• EOL/EOS Upgrades - Per group guidelines. Track and execute upgrades and/or do risk assessment and deviation approval.
• Housekeeping - scripted clean-ups and truncations of logs and temp files after necessary archives executed
• Backups - Required backup strategy per backup guidelines operationalized to central Backup Platform. Recurring scheduled backup validation activities scheduled and performed ongoing to ensure backups working per need. Note all cloud hosted workloads inclusive of logs must be backup and archived on premise data backup and archive solution.
• Work with system stakeholders to ensure proper classification of system criticality and ensure design and architecture can meet the assessed criticality needs:

• MAS 644 defined Critical system - Ensure DR setup and working and can achieve RTO within 4 hours, RPO within 2 hours and maximum unplanned downtime of not more than 4 hours per rolling 12 months;
• MAS 644 defined non-critical system - Ensure HA/DR per stakeholder requirement.
• BCM related activity planning and execution - Cloud infra and both Cloud and non-Cloud for DB, Middleware components
• Raise CAB CR as necessary
• Cutover related planning and execution - Cloud infra and both Cloud and non-Cloud for DB, Middleware components
• Ensure and maintain adequate test environments in good working order to support enhancements and new projects; - Cloud infra and both Cloud and non-Cloud for DB, Middleware components
• Define, modernize and enforce SDLC for both in-house and 3rd party solution platforms.
• Ensure the setup, integrity and ongoing improvements to the AWS Landing zone.
• Administer IOS apps store and Google play store for publishing bank mobile apps updates
• Track IT related spend against budget. - Cloud infra and both Cloud and non-Cloud for DB, Middleware components.
• Write Memos to authorize procurements - Cloud infra and both Cloud and non-Cloud for DB, Middleware components
• Write Memos to get deviation approvals where required - Cloud infra and both Cloud and non-Cloud for DB, Middleware components
• Assist project team in architecting, sizing and estimating Cloud infra and both Cloud and non-Cloud for DB, Middleware components costs for new workloads
• Work with IT Security team to ensure security aspects incorporated
• Setup and ensure non production environments on cloud infra for new initiatives
• Setup and automate deployment using landing zone pipeline platform
• Work with vendor and/or business applications team to deploy changes to workload
• Administer IOS apps store and Google play store for publishing bank mobile apps new
• Write Memos to authorize procurements - Cloud infra and both Cloud and non-Cloud for DB,
• Middleware components
• Write Memos to get deviation approvals where required - Cloud infra and both Cloud and non-Cloud for DB, Middleware components

Regulatory and Procedural Expertise

• Keep up to date and refreshed on required reading related to guiding how IT must be run in a regulated Financial institution. Minimum read list:

• MAS Technology Risk Management Guidelines (TRMG)
• MAS Notice 644 - Technology Risk Management.
• MAS Notice 655 - Cyber Hygiene
• MAS Outsourcing Guidelines
• RHB Group IT Security Guidelines and SG addendum/s
• SG Patching Guidelines
• SG Backup Guidelines
• SG Technology Department Operational Manual (OM)
• SG IT Standard Operational Procedures (SOP), and System Manuals (SM)
• SG Procurement Operational Manual (OM)
• AWS Well architected framework and 5 pillars whitepapers

Other Responsibilities

• Participate in Monthly Technology Department meetings.
• Participate in regular Team meeting.
• Use Department issue and work tracking platform.
• Maintain and keep up to date team knowledge base and assist in updating team document assets such as system manual / standard operating procedures (SOP), and operations manuals

Qualifications

Formal Education:

• Diploma or bachelor's degree Qualification

Professional Accreditation:

• AWS, Azure, Google Cloud related certifications (not mandatory)
• Scrum master or other agile SDLC related certifications (not mandatory)
• Oracle certifications
• Microsoft certifications

Preferred level of Experience (by years/function/industry):

• Minimum of 10 years of working experience as an open systems engineer and/or system administrator in a financial institution based out of Singapore or Malaysia., OR Minimum 3 years of working experience as cloud engineer or similar role on AWS, Azure, or Google Cloud.
• Experience as System admin for DB (Oracle, MS SQL, MySQL, PostGRES, NoSQL) and Middleware (Tomcat, IBM MQ or similar, BEA WebLogic)
• Experience managing vendors

Other skills required:

• Strong desire to learn and improve;
• Strong interest in AWS related technologies and Cloud technologies as a whole.
• Good understanding of how to implement AWS workloads that adhere to the well architected framework
• Scripting skills
• Proactive attitude and ability to handle adversity
• Mentality to see things through and not give up.
• Knowledge in DB system admin (Oracle, MS SQL Server, MySQL, PostgreSQL, AWS Dynamo DB, AWS RDS / Aurora, AWS Redshift, MongoDB), Middleware system admin (Weblogic, JBoss, IBM MQ)

Additional Information

RHB is a dynamic organization that promotes a work culture of high performance, where its biggest asset, the RHB-ians, are continuously developed & nurtured to their fullest potential through its robust talent management practices.

At RHB, we take PRIDE in our people and our teams. Great relationships built on trust, a 'leading it right' environment, challenging assignments and a culture of excellence are the pillars to the dynamic and diversified workplace we call home.