Who we are
American International Group, Inc. (AIG) is a leading global insurance organization. Building on 100 years of experience, today AIG member companies provide a wide range of property casualty insurance, life insurance, retirement solutions, and other financial services to customers in more than 80 countries and jurisdictions. These diverse offerings include products and services that help businesses and individuals protect their assets, manage risks and provide for retirement security.
Get to know the business
General Insurance is a leading provider of insurance products and services for commercial and personal insurance customers. It includes one of the world’s most far-reaching property casualty networks. General Insurance offers a broad range of products to customers through a diversified, multichannel distribution network.
Your future team
AIG's technology teams collaborate with their worldwide colleagues and partners every day to undertake the challenges of providing IT support to one of the world’s leading financial services firms. We’re people who believe that with the right values and hard work, anything is possible. We know that if we’re at our best, that enables our customers to be their best and realize their dreams and hoped for successes. The Information Technology group provides enterprise-wide IT solutions for all of AIG’s specialized disciplines. Technology provides strategic and procedural support for all of AIG’s specialized disciplines, such as policy issuance, premium collection, claims handling, and administration. It enables AIG to deliver business strategies through efficient world-class IT and operations services, while providing IT risk management and security measures.
The APAC Risk & Controls Officer is an integral leader in the Technology Risk and Controls (TRC) team. This person will be responsible for driving compliance with the IT regulations in APAC. Key responsibilities will include, but are not limited to, assessing new and updated IT regulations for gaps, working with the key stakeholders to create action plans to address these gaps, and monitor gaps through completion. In addition, the person in this role should take learnings from each regulation and apply them to any new and updated regulations. In addition, this person will also be responsible for facilitating the annual IT Risk and Control Self-Assessment (RCSA), managing the country forum calls, and managing issues across APAC.
Your contribution at AIG
The APAC Risk & Controls Officer will be responsible for a number of critical initiatives, including the following:
Managing IT Regulatory Compliance:
- When a new or updated regulation is identified, conduct a regulatory assessment to assess compliance with the regulation and identify gaps
- Draft action plans to address any gaps and establish ownership to remediate the gaps
- Obtain approval of the plans by senior leadership and the owners of the action plans
- Monitor action plans, understanding where there are significant issues, and what can be done to address these issues, escalating as appropriate
- Manage technology regulatory inquiries and requests for information for technology and cyber (coordination, data collection, status reporting)
Facilitating the annual IT RCSA:
- Partner with IT and the global TRC team to assess compliance against key controls
- Drive the drafting of the Action Plans, confirming that they address the root cause of the issues
- Monitor Action Plans, understanding where there are significant issues, and what can be done to address these issues, escalating as appropriate
Coordinating monthly TRC Zone & Country Forums:
- Moderate the monthly calls with each country team
- Prepare for the meeting (including the presentation deck and updates)
- Monitoring and follow up on post engagement actions
Tracking issues across APAC:
- Assist with the risk acceptance / acknowledgement process for APAC issues, including documenting these issues, assessing the risk, and reviewing them with key stakeholders
- Assist with the risk acceptance process for APAC-driven requests
- Assist with Key Risk Indicators (KRIs)
What we are looking for
- Bachelor’s Degree with good experience within technology risk, control, and governance disciplines
- Strong roblem-solving and risk skills
- Understanding of IT Risk principles and best practices
- Ability to oversee multiple processes, action plans and key stakeholders simultaneously
- Experience raising awareness of issues to key stakeholders across technology
- Demonstrate effective leadership skills
- Clear, concise written and oral communication skills coupled with the ability to drive agreement using information and interpersonal acumen
- Proven track record of drawing conclusions, making decisions, and using data to solve problems
- Ability to define solutions from ambiguous scenarios
- Maintain excellent interpersonal and oral/written communication skills
- Active listener
- Ability to drive change through influence
- Excellent negotiation, collaboration, facilitation and coordination
- Negotiate prioritization and treatment of risk issues that span
