Manager / AVP, Data Loss Monitoring, Group Risk Management

Why Join OCBC

OCBC Bank is Singapore's longest established bank, formed in 1932 through the merger of three local banks, the oldest of which was founded in 1912. We are committed to helping individuals and businesses across communities achieve their aspirations through innovative financial services tailored to their needs.

We live our values—integrity, foresight, respect, responsibility, and creating lasting value—in everything we do. At OCBC, we foster a culture of openness, teamwork, and fairness. We invest in our people through comprehensive programmes that support both professional and personal development.

About the Team

The Data Loss Monitoring (DLM) team plays a critical role in safeguarding sensitive information across OCBC Group. We monitor key communication channels—email, endpoint, and Bloomberg chat—to detect and prevent the accidental or intentional leakage of confidential data, including customer, staff, and bank-related information.

Operating as a second line of defence, the DLM team oversees the bank's data loss prevention programme, ensuring alignment with Information Security and Digital Risk policies. We assess, escalate, track, and report incidents, configure monitoring rules, and continuously enhance our detection capabilities.

Your Role:

As a member of the DLM team, you will be responsible for:

• Handling daily alerts related to outgoing external email, endpoint, and Bloomberg chat channels in accordance with established SLAs.

• Providing risk and control oversight, identifying and assessing risks, and implementing security measures to prevent data loss.

• Leading awareness initiatives and promoting best practices across business units.

• Updating procedures and controls to enhance data security posture.

• Supporting key business and support divisions in managing data loss risks.

You will report to the Head of Data Loss Management and collaborate closely with cross-functional teams across Group Risk Management.

Key Responsibilities:

• Assess, escalate, track, and report potential data loss incidents across monitored channels.

• Prepare and present reports to Senior Management and the Board.

• Develop and maintain policies, procedures, and operating guidelines.

• Coordinate with Business Units on Data Loss Impact Assessment (DLIA) submissions.

• Lead training and awareness programmes on data loss prevention.

• Configure and maintain DLP systems, including rule development, testing, and validation to ensure effectiveness and alignment with business objectives.

Who You Are:

• Minimum 5–8 years of experience in Information Security or Digital Risk Management, with at least 3 years in Data Loss Prevention.

• Prior experience in managing DLP programmes within financial institutions.

• Familiarity with Symantec DLP is preferred; experience with other tools (e.g., Forcepoint, McAfee, Microsoft Purview) is a plus.

• Knowledge of regulatory frameworks such as MAS TRM Guidelines, PDPA, and GDPR.

• Professional certifications such as CISSP, CISM, CISA or equivalent are advantageous.

• Excellent interpersonal and stakeholder management skills.

• Strong analytical mindset and ability to work independently.

• Proficient in Microsoft Excel and PowerPoint; experience with data visualization tools is a plus.

• Strong written communication skills for drafting policies, procedures, and reports.

• Results-driven, resourceful, and comfortable engaging with senior management.

Career Development

This role offers exposure to enterprise-wide security operations and the opportunity to lead strategic initiatives in data protection. It is ideal for professionals seeking to advance into senior leadership roles in cybersecurity, risk management, or governance.