Job Summary
Join Standard Chartered Bank's Data Security team as a Lead in PKI and Certificate Management, a pivotal role within our global Cyber Security framework. Data security underpins every facet of our operations, ensuring robust protection against evolving cyber threats and fostering secure growth across more than 70 countries. This role places you at the heart of our digital transformation journey, delivering best-in-class Public Key Infrastructure services that enable our business units to build, deploy, and operate secure applications with confidence. You will collaborate with diverse teams to strengthen the Bank's security posture and support our commitment to maintaining trust and resilience in a rapidly changing cyber landscape. If you are an expert with extensive PKI experience, passionate about driving security innovation and operational excellence, this role offers a unique opportunity to make a tangible impact on a global scale.
As the Lead for PKI and Certificate Management, you will contribute strategically and technically to safeguard critical information assets, working with a dynamic team dedicated to fostering a secure banking environment. Your expertise will underpin the assurance standards that empower our stakeholders worldwide, ensuring uninterrupted business continuity and regulatory compliance.
Key Responsibilities
• Oversee and manage the Microsoft Active Directory Certificate Services infrastructure, maintaining the highest levels of operational integrity for Root CA, Issuing CA, NDES/SCEP, OCSP, and CRL systems.
• Lead initiatives to enhance certificate lifecycle management, proactively identifying opportunities to upgrade toolsets and processes to support cloud, network, endpoint, and database environments.
• Collaborate cross-functionally with business, infrastructure, and security operations teams to architect solutions that enforce robust data protection and regulatory compliance.
• Provide expert technical guidance, advisory support, and incident response leadership to swiftly address and remediate security vulnerabilities within the PKI landscape.
• Design, review, and maintain certificate templates that meet current and anticipated business requirements while aligning with security best practices.
• Develop and maintain comprehensive documentation, including architecture, policies, operational procedures, and configuration standards to ensure knowledge continuity and audit readiness.
• Conduct periodic PKI health assessments, monitor system performance and capacity, and validate disaster recovery processes to ensure resilient service availability.
• Analyze security incidents and conduct vulnerability assessments, applying risk-based approaches to inform security controls and tolerance decisions.
• Contribute actively to the governance framework, ensuring alignment with risk and audit requirements to uphold the integrity of the Bank’s cybersecurity infrastructure.
• Communicate effectively across all organisational levels, providing clear, concise updates and technical insights to both senior leadership and hands-on practitioners.
Skills and Experience
Core Skills and Experience:
- A minimum of eight years’ experience in data security with a focus on Public Key Infrastructure (PKI) and certificate management, demonstrating hands-on expertise.
- Comprehensive knowledge of cryptographic key management principles and hardware security modules (HSM).
- Proven experience administering Microsoft PKI solutions at scale, including Root Certification Authorities, Subordinate CAs, OCSP responders, and certificate revocation infrastructure.
- Familiarity with security frameworks and compliance standards such as PCI-DSS, alongside practical expertise in tokenization, data masking, and data dispersion techniques.
Additional Technical Competencies:
- Programming skills in languages such as Java or Python to support automation, integration, and tooling development associated with certificate management.
- Ability to apply security assessment methodologies and perform vulnerability analyses related to encryption and PKI environments.
Demonstrated capacity to work within complex organisational structures and effectively communicate technical concepts to diverse stakeholders is essential for success in this position.
Motivations
At Standard Chartered, we value individuals who approach their work with integrity and courage, embodying our principle to 'Do the right thing.' We encourage our team members to be resilient agents of change, thinking client-first and embracing continuous innovation. Motivated professionals who seek to uphold ethical standards while driving security excellence thrive in our environment. If you have a passion for contributing meaningfully to a global institution’s security posture and cherish collaborative, principled leadership, this role will offer a fulfilling platform to realise your ambitions.
Qualifications
Essential Qualifications and Experience:
- Proven experience managing Public Key Infrastructure and cyber security infrastructure components at an enterprise level.
- Relevant professional certifications including Microsoft PKI Specialist, CISSP (Certified Information Systems Security Professional), and CISM (Certified Information Security Manager) are highly desirable.
Language Proficiency:
- Fluent written and verbal communication skills in English are required to engage effectively with international teams and document critical security procedures.
Candidates with additional certifications or experience in risk management frameworks and cloud security technologies will be considered favourably.
About Standard Chartered
We're an international bank, nimble enough to act, big enough for impact. For more than 170 years, we've worked to make a positive difference for our clients, communities, and each other. We question the status quo, love a challenge and enjoy finding new opportunities to grow and do better than before. If you're looking for a career with purpose and you want to work for a bank making a difference, we want to hear from you. You can count on us to celebrate your unique talents and we can't wait to see the talents you can bring us.
Our purpose, to drive commerce and prosperity through our unique diversity, together with our brand promise, to be here for good are achieved by how we each live our valued behaviours. When you work with us, you'll see how we value difference and advocate inclusion.
Together we:
- Do the right thing and are assertive, challenge one another, and live with integrity, while putting the client at the heart of what we do
- Never settle, continuously striving to improve and innovate, keeping things simple and learning from doing well, and not so well
- Are better together, we can be ourselves, be inclusive, see more good in others, and work collectively to build for the long term
What we offer
In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing.
- Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.
- Time-off including annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.
- Flexible working options based around home and office locations, with flexible working patterns.
- Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits
- A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning.
- Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.