Total 9 security analyst job vacancies in Islandwide

In this role, you will uphold the responsibilities in Complaint Management and deliver Fair Dealing Outcome in resolving customers’ complaints in an independent, effective and prompt manner. You will also develop and implement customer centric strategies and framework to deliver consistent high standard and quality service to our customers and business partners.

Responsiblities:

• Handle end-to-end process of complaints escalated by both internal and external parties with adherence to service delivery standards.
• Able to conduct and conclude investigation with the relevant departments and communicate investigation findings and outcome to complainants
• Effectively manage interactions with demanding or difficult complainants.
• Handle face-to-face meetings, phone calls, and written communications regarding complaints
• Collaborate effectively with colleagues from other departments who support the investigation and service recovery processes.
• Identify key issues in the complaints received and provide feedback to the concerned departments and/or management for review and improvement.
• Represent the Company in managing the full process of customer disputes through mediation and adjudication at the Financial Industry Disputes Resolution Centre Ltd (FIDReC) and other external escalation channels.
• Submit complaints management related reports on a timely basis
• Support and attend to policy renewal and billing related enquiries from intermediaries and corporate clients. .
• Suggest and provide process improvement in alignment with organization’s Technology, Digital and Analytic (TDA) direction.
• Manage internal and external audits on complaints data and implement proposed improvements if any.
• To undertake ad-hoc tasks and projects assigned by Head, Customer Experience

Minimum Job Requirements:

• Bachelor’s degree holder
• Minimum of 5 years of experience in Customer and Complaint Management, preferably with knowledge in insurance and employee benefits (Group Insurance)
• Exceptional follow-up skills, prioritization, multitasking, organized and time management capabilities
• Ability to thrive in a fast-paced environment and meet tight deadlines
• Result-oriented personality
• Strong interpersonal and communication skills
• Proven ability to work effectively as part of a team

WHAT WE OFFER:

• A base salary with attractive commission structure to award good performers
• Permanent role with attractive employee benefits
• A Dynamic & Inclusive Team Culture

WHAT YOU’LL BE DOING

• Perform telemarketing calls to leads provided by partners to achieve sales target
• Understanding the needs of the customers and recommend suitable products to them
• Convert leads provided by partner to sales through telemarketing activities
• Ensure call activities are conducted with full adherence to regulations and in line with the Quality standards

WE ARE LOOKING FOR SOMEONE WITH | YOU WILL HAVE:

• Obtained a minimum of 'O' Level or higher.
• Possess 1 to 3 year of prior Call Centre and/or Telemarketing/Telesales experience within Financial Industry
• Good interpersonal and communication skills

WHAT WE OFFER:

• A base salary with attractive commission structure to award good performers
• Permanent role with attractive employee benefits
• A Dynamic & Inclusive Team Culture

WHAT YOU’LL BE DOING

• Perform telemarketing calls to leads provided by partners to achieve sales target
• Understanding the needs of the customers and recommend suitable products to them
• Convert leads provided by partner to sales through telemarketing activities
• Ensure call activities are conducted with full adherence to regulations and in line with the Quality standards

WE ARE LOOKING FOR SOMEONE WITH | YOU WILL HAVE:

• Obtained a minimum of 'O' Level or higher.
• Possess 1 year of prior Call Centre and/or Telemarketing/Telesales experience within Financial Industry
• Good interpersonal and communication skills

We are seeking an experienced senior manager to lead our information security team, combining strong hands-on technical expertise as well as people management experience in the information security domain. They will lead a team to design and/or review application security including but not limited to penetration test, source code review, Cloud Security and various inter-connected application and infrastructures, especially in the area of authentication, authorization, information protection, and cryptographic controls for both on-premise and cloud environment. The role also has supervision of the AIA-SG IAM and Threat Intelligence Manager and their team.

This role is responsible for providing leadership in application security review for the strategic digital solutions across technology to ensure secure solutions for business growth. The person should have solid written and verbal communication skills.

WHAT YOU’LL BE DOING:

VAPT

Manage the AIA-SG Vulnerability Assessment and Penetration Testing team responsible for delivering the following services to AIA-SG, including Security Architecture:

Application Security

• Design and/or review application security architecture proposal for various security-driven initiatives or business-driven initiatives for on-premise and cloud environment.
• Manage external third-party for application penetration testing engagements.

Infrastructure Security

• Manage end-to-end infrastructure security activities, such as vulnerability management, servers’ security monitoring & hardening, infrastructure as a code, etc.
• Design and/or review infrastructure security architecture proposal for various security-driven initiatives for on-premise and cloud environment.

Cloud Security

• Manage compliancy level of AIA SG cloud security assets based on ongoing regular scanning according to the defined threshold.
• Evaluate the security aspect of new cloud-based solutions proposed by application development team, infrastructure team, or business users.
• Manage various cloud security BAU activities, such as assets provisioning, deprovisioning, hardening, etc.

Penetration Testing

• Manage end-to-end application security activities, including application penetration testing, authentication / authorization design / review, and DevSecOps design & roll out.
• Manage Third Party relationships with industry vendors who undertake security assessment services.
• Oversight of annual Pen testing schedule.

Information Security Architecture

• Lead a team to design and/or review application security architecture proposal for various security-driven initiatives or business-driven initiatives for on-premise and cloud environment.
• Design and/or review authentication and authorization flow of the applications, whether it is aligned with security best practices and organization's IT security technology policy & procedure in terms of the strength of access controls, session management, cache management, cookie management, token management, cryptographic algorithm, and information/data protection.
• Assess the security aspect of new proposed application tools / platforms from application team, and relevance/consequences to existing security architecture.
• Work closely with application development and infrastructure team to proactively stay on top of latest secure application design to deliver thorough security recommendation aligned with organization's IT security technology policy & procedure.

Identity and Access Management

• Supervise the AIA-SG IAM Manager and their team performing IAM Governance functions for the Business Unit.

Cyber Security & Security Incident Handling

• Work with Security Operation Centre (SOC) Team to ensure secure protection of AIA SG environment.
• Deploy new cyber security initiatives and roll out the platform together with SOC Team.
• Point of contact for security incident handling and investigation, starting from incident is identified, handled, and resolved.

Security Advisory

• Provide feasible security recommendations or guidance based on queries / changes initiated by application development team, infrastructure team, or business users.
• Facilitate challenging security conversations and provide acceptable solutions where IT standards are contradicting with business demands to achieve acceptable business solutions without sacrificing security and compliance aspects.

Managerial Responsibilities

• Lead promotion of activities to increase information security within your teams to embed and continuously improve adherence to good practice.
• Drive a continues Learning and Development program for staff training. (with inhouse and external training programs).

WHAT WE ARE LOOKING FOR:

• University degree in one of the following or related disciplines (Computer Science, Computer Engineering, Information Security, Information Systems).
• Minimum 15 years of experiences of information security domain, especially in Application Security, Infrastructure Security and Cloud Security.
• Preferable to have application development or infrastructure operation background with hands-on experiences of designing and/or reviewing application security or infrastructure security.
• Hands-on information security experience in the Multiple Cloud Environment (SaaS, PaaS and IaaS) and Cyber Incident management.
• Certifications related to security architecture or Cloud Security is preferable, such as CCSP, Azure DevOps certification, Azure Solutions Architect certification, etc.
• Preferably a holder of one or more of the following information security and audit qualifications: CISSP, CISA, CRISC, CCSP.
• Good knowledge of latest security technologies and cyber landscape in a highly regulated industry.
• Good interpersonal and communication skill.
• Strong leadership with a high integrity, proactive mindset, and strong ownership.
• Working experiences in insurance / banking / IT industry is preferred.
• Leading DevSecOps tool experience such as Snyk, Veracode, SonarQube
• Infrastructure Security: Windows, Linux, AS400.
• Application framework and Security: NodeJS, ReactJS, .NET
• Security Advisory and Assessment.
• Security Incident Management.
• CI/CD pipelines: Azure DevOps, Bamboo, Jenkins, GitHub, Bitbucket.

We are seeking an experienced senior manager to lead our information security team, combining strong hands-on technical expertise as well as people management experience in the information security domain. They will lead a team to design and/or review application security including but not limited to penetration test, source code review, Cloud Security and various inter-connected application and infrastructures, especially in the area of authentication, authorization, information protection, and cryptographic controls for both on-premise and cloud environment. The role also has supervision of the AIA-SG IAM and Threat Intelligence Manager and their team.

This role is responsible for providing leadership in application security review for the strategic digital solutions across technology to ensure secure solutions for business growth. The person should have solid written and verbal communication skills.

WHAT YOU’LL BE DOING:

VAPT

Manage the AIA-SG Vulnerability Assessment and Penetration Testing team responsible for delivering the following services to AIA-SG, including Security Architecture:

Application Security

• Design and/or review application security architecture proposal for various security-driven initiatives or business-driven initiatives for on-premise and cloud environment.
• Manage external third-party for application penetration testing engagements.

Infrastructure Security

• Manage end-to-end infrastructure security activities, such as vulnerability management, servers’ security monitoring & hardening, infrastructure as a code, etc.
• Design and/or review infrastructure security architecture proposal for various security-driven initiatives for on-premise and cloud environment.

Cloud Security

• Manage compliancy level of AIA SG cloud security assets based on ongoing regular scanning according to the defined threshold.
• Evaluate the security aspect of new cloud-based solutions proposed by application development team, infrastructure team, or business users.
• Manage various cloud security BAU activities, such as assets provisioning, deprovisioning, hardening, etc.

Penetration Testing

• Manage end-to-end application security activities, including application penetration testing, authentication / authorization design / review, and DevSecOps design & roll out.
• Manage Third Party relationships with industry vendors who undertake security assessment services.
• Oversight of annual Pen testing schedule.

Information Security Architecture

• Lead a team to design and/or review application security architecture proposal for various security-driven initiatives or business-driven initiatives for on-premise and cloud environment.
• Design and/or review authentication and authorization flow of the applications, whether it is aligned with security best practices and organization's IT security technology policy & procedure in terms of the strength of access controls, session management, cache management, cookie management, token management, cryptographic algorithm, and information/data protection.
• Assess the security aspect of new proposed application tools / platforms from application team, and relevance/consequences to existing security architecture.
• Work closely with application development and infrastructure team to proactively stay on top of latest secure application design to deliver thorough security recommendation aligned with organization's IT security technology policy & procedure.

Identity and Access Management

• Supervise the AIA-SG IAM Manager and their team performing IAM Governance functions for the Business Unit.

Cyber Security & Security Incident Handling

• Work with Security Operation Centre (SOC) Team to ensure secure protection of AIA SG environment.
• Deploy new cyber security initiatives and roll out the platform together with SOC Team.
• Point of contact for security incident handling and investigation, starting from incident is identified, handled, and resolved.

Security Advisory

• Provide feasible security recommendations or guidance based on queries / changes initiated by application development team, infrastructure team, or business users.
• Facilitate challenging security conversations and provide acceptable solutions where IT standards are contradicting with business demands to achieve acceptable business solutions without sacrificing security and compliance aspects.

Managerial Responsibilities

• Lead promotion of activities to increase information security within your teams to embed and continuously improve adherence to good practice.
• Drive a continues Learning and Development program for staff training. (with inhouse and external training programs).

WHAT WE ARE LOOKING FOR:

• University degree in one of the following or related disciplines (Computer Science, Computer Engineering, Information Security, Information Systems).
• Minimum 15 years of experiences of information security domain, especially in Application Security, Infrastructure Security and Cloud Security.
• Preferable to have application development or infrastructure operation background with hands-on experiences of designing and/or reviewing application security or infrastructure security.
• Hands-on information security experience in the Multiple Cloud Environment (SaaS, PaaS and IaaS) and Cyber Incident management.
• Certifications related to security architecture or Cloud Security is preferable, such as CCSP, Azure DevOps certification, Azure Solutions Architect certification, etc.
• Preferably a holder of one or more of the following information security and audit qualifications: CISSP, CISA, CRISC, CCSP.
• Good knowledge of latest security technologies and cyber landscape in a highly regulated industry.
• Good interpersonal and communication skill.
• Strong leadership with a high integrity, proactive mindset, and strong ownership.
• Working experiences in insurance / banking / IT industry is preferred.
• Leading DevSecOps tool experience such as Snyk, Veracode, SonarQube
• Infrastructure Security: Windows, Linux, AS400.
• Application framework and Security: NodeJS, ReactJS, .NET
• Security Advisory and Assessment.
• Security Incident Management.
• CI/CD pipelines: Azure DevOps, Bamboo, Jenkins, GitHub, Bitbucket.

We are seeking an experienced senior manager to lead our information security team, combining strong hands-on technical expertise as well as people management experience in the information security domain. They will lead a team to design and/or review application security including but not limited to penetration test, source code review, Cloud Security and various inter-connected application and infrastructures, especially in the area of authentication, authorization, information protection, and cryptographic controls for both on-premise and cloud environment. The role also has supervision of the AIA-SG IAM and Threat Intelligence Manager and their team.

This role is responsible for providing leadership in application security review for the strategic digital solutions across technology to ensure secure solutions for business growth. The person should have solid written and verbal communication skills.

WHAT YOU’LL BE DOING:

VAPT

Manage the AIA-SG Vulnerability Assessment and Penetration Testing team responsible for delivering the following services to AIA-SG, including Security Architecture:

Application Security

• Design and/or review application security architecture proposal for various security-driven initiatives or business-driven initiatives for on-premise and cloud environment.
• Manage external third-party for application penetration testing engagements.

Infrastructure Security

• Manage end-to-end infrastructure security activities, such as vulnerability management, servers’ security monitoring & hardening, infrastructure as a code, etc.
• Design and/or review infrastructure security architecture proposal for various security-driven initiatives for on-premise and cloud environment.

Cloud Security

• Manage compliancy level of AIA SG cloud security assets based on ongoing regular scanning according to the defined threshold.
• Evaluate the security aspect of new cloud-based solutions proposed by application development team, infrastructure team, or business users.
• Manage various cloud security BAU activities, such as assets provisioning, deprovisioning, hardening, etc.

Penetration Testing

• Manage end-to-end application security activities, including application penetration testing, authentication / authorization design / review, and DevSecOps design & roll out.
• Manage Third Party relationships with industry vendors who undertake security assessment services.
• Oversight of annual Pen testing schedule.

Information Security Architecture

• Lead a team to design and/or review application security architecture proposal for various security-driven initiatives or business-driven initiatives for on-premise and cloud environment.
• Design and/or review authentication and authorization flow of the applications, whether it is aligned with security best practices and organization's IT security technology policy & procedure in terms of the strength of access controls, session management, cache management, cookie management, token management, cryptographic algorithm, and information/data protection.
• Assess the security aspect of new proposed application tools / platforms from application team, and relevance/consequences to existing security architecture.
• Work closely with application development and infrastructure team to proactively stay on top of latest secure application design to deliver thorough security recommendation aligned with organization's IT security technology policy & procedure.

Identity and Access Management

• Supervise the AIA-SG IAM Manager and their team performing IAM Governance functions for the Business Unit.

Cyber Security & Security Incident Handling

• Work with Security Operation Centre (SOC) Team to ensure secure protection of AIA SG environment.
• Deploy new cyber security initiatives and roll out the platform together with SOC Team.
• Point of contact for security incident handling and investigation, starting from incident is identified, handled, and resolved.

Security Advisory

• Provide feasible security recommendations or guidance based on queries / changes initiated by application development team, infrastructure team, or business users.
• Facilitate challenging security conversations and provide acceptable solutions where IT standards are contradicting with business demands to achieve acceptable business solutions without sacrificing security and compliance aspects.

Managerial Responsibilities

• Lead promotion of activities to increase information security within your teams to embed and continuously improve adherence to good practice.
• Drive a continues Learning and Development program for staff training. (with inhouse and external training programs).

WHAT WE ARE LOOKING FOR:

• University degree in one of the following or related disciplines (Computer Science, Computer Engineering, Information Security, Information Systems).
• Minimum 15 years of experiences of information security domain, especially in Application Security, Infrastructure Security and Cloud Security.
• Preferable to have application development or infrastructure operation background with hands-on experiences of designing and/or reviewing application security or infrastructure security.
• Hands-on information security experience in the Multiple Cloud Environment (SaaS, PaaS and IaaS) and Cyber Incident management.
• Certifications related to security architecture or Cloud Security is preferable, such as CCSP, Azure DevOps certification, Azure Solutions Architect certification, etc.
• Preferably a holder of one or more of the following information security and audit qualifications: CISSP, CISA, CRISC, CCSP.
• Good knowledge of latest security technologies and cyber landscape in a highly regulated industry.
• Good interpersonal and communication skill.
• Strong leadership with a high integrity, proactive mindset, and strong ownership.
• Working experiences in insurance / banking / IT industry is preferred.
• Leading DevSecOps tool experience such as Snyk, Veracode, SonarQube
• Infrastructure Security: Windows, Linux, AS400.
• Application framework and Security: NodeJS, ReactJS, .NET
• Security Advisory and Assessment.
• Security Incident Management.
• CI/CD pipelines: Azure DevOps, Bamboo, Jenkins, GitHub, Bitbucket.

WHAT WE OFFER:

• A base salary with attractive commission structure to award good performers
• Permanent role with attractive employee benefits
• A Dynamic & Inclusive Team Culture

WHAT YOU’LL BE DOING

• Perform telemarketing calls to leads provided by partners to achieve sales target
• Understanding the needs of the customers and recommend suitable products to them
• Convert leads provided by partner to sales through telemarketing activities
• Ensure call activities are conducted with full adherence to regulations and in line with the Quality standards

WE ARE LOOKING FOR SOMEONE WITH | YOU WILL HAVE:

• Obtained a minimum of 'O' Level or higher.
• Possess 1 year of prior Call Centre and/or Telemarketing/Telesales experience within Financial Industry
• Good interpersonal and communication skills

In this role, you will be responsible for supporting the execution and implementation of the system enhancements in Life Operations.

What you will do:

• Actively involved in delivery and implementation of strategic initiatives and BAU enhancements of digital platforms requested by the business partners.
• Conduct a thorough analysis of end-to-end business process, systems, and data related to operations.
• Drive requirement workshops to gather requirements, identify business needs, define project/ enhancement scope. Ensure the business requirements are comprehensive and they meet the business needs in taking consideration of future and changing business needs.
• Facilitate and prioritize the changes with the users and other key parties if there are gaps so that the agreed launch timeline will not be impacted.
• Ensure business requirements are clearly articulate, translated and documented for efficient delivery.
• Evaluate alternative high-level solutions with Information Technology and make appropriate recommendations to the users.
• Translate business requirements into test scenarios, conditions and expected results for user acceptance testing (UAT).
• Conduct/review UAT and responsible for UAT sign off.
• Contribute to the overall planning/re-planning of the project timeline and resources, effective monitoring of the projects/ BAU enhancements lifecycle.
• Provide guidance to Analyst and Support Specialist.
• Prepare/Review training materials.
• Actively seek continuous improvements in area of expertise and continue to be relevant to the business.

What you will need:

• Diploma or Degree Holder in Business IT, Computer Science or a related discipline
• Experience in requirements gathering and managing delivery of life/health insurance systems and integrations
• Hands-on experience as a business analyst with 3- 5 years working experience in life insurance operations and with knowledge in both operation and system areas are preferred.
• Meticulous and able to manage priorities to meet deadlines
• Strong analytical and effective problem-solving skills
• Integral Life (Life 400/ Asia AS400) background is preferred
• Experience in digital products or services (mobile or web)
• Experience in Agile and waterfall project methodology
• Experience in UAT. Follow through the defects resolution and ensure all defects are resolved.
• Good verbal and written communication skills and good interpersonal skills
• Ability to work in fast paced, challenging environment while attending to multiple projects
• Pro-active and self-motivated. Able to take the initiative independently and work under minimal guidance/ supervision
• Positive attitude and willingness to share and learn
• A great teammate

In this role, you will uphold the responsibilities in Complaint Management and deliver Fair Dealing Outcome in resolving customers’ complaints in an independent, effective and prompt manner. You will also develop and implement customer centric strategies and framework to deliver consistent high standard and quality service to our customers and business partners.

What you will do:

• Handle end-to-end process of complaints escalated by internal and external parties within the service delivery standards.
• Able to conduct and conclude investigation with the relevant departments and communicate investigation findings and outcome to complainant
• Able to manage demanding/difficult complainants
• Handle face-to-face meetings, telephone contacts and written communications with complaints
• Effective liaison with colleagues from other departments that support investigation and service recovery process
• Identify critical issues of the complaints received and provide feedback to the department concerned and/or management for review and improvement
• Support in representing the Company to handle end-to-end process of customers’ dispute through mediation and adjudication at Financial Industry Disputes Resolution Centre Ltd (FIDReC)
• Submit complaints management related reports on a timely basis
• Attend to enquiries/feedback received at the various customer service touch points.
• Provide and suggest process improvement in alignment to organization Technology, Digital and Analytic (TDA) direction.
• Handle internal and external audits on complaints data and work on proposed improvement if any.
• To undertake ad-hoc tasks and projects assigned by Head, Customer Experience

What you will need:

• Degree holder, with a minimum of 5 years Customer Management preferably with insurance/employee benefits knowledge.
• Possess excellent capabilities in following up, prioritization and multitasking
• Able to work in fast-paced environment and work within tight timelines
• Result oriented personality is essential
• Good interpersonal and communication skills
• Good teammate