Total 2 information technology job vacancies in raffles city

FIND YOUR 'BETTER' AT AIA

We don’t simply believe in being ‘The Best’. We believe in better - because there’s no limit to how far ‘better’ can take us.

We believe in empowering every one of our people to find their 'better' - in the work they do, the career they build, the life they live and the difference they make. So that together we can support even more people - including our own - to live Healthier, Longer, Better Lives.

If you believe in better, we’d love to hear from you.

About the Role

This position is responsible for to providing consultation, professional advice, awareness/training on information security and key technology risk matters relating to the abovementioned geographical responsibilities, thereby contributing to building a strong information security risk culture cantered on people, processes and technology. The role will also coordinate regular governance engagements and being involved in technology-related audit engagements for AIA Singapore, and exercise professional judgment and assessments on the material to be provided by the various process and control owners for the audits.

What you will do:

Information Security & Technology Risk Metrics

• Support the alignment of various information security and technology risk metrics for management reporting and escalation – this includes reporting/escalation of outstanding or overdue action required from penetration tests, vulnerability assessments, security incidents, policy/standards deviations, third party security assessments, etc.
• Drive the monthly Technology Security Governance forum focusing on highlighting metrics impacting the Company’s cybersecurity metrics.
• Collate and review collated metrics and material relating to the Operational Risk Management forums, Key Risk Indicators and Key Risk Tolerance Indicators for cybersecurity and technology processes.

Risk Assessments, Audit and Regulatory Management

• Support Technology related audit engagements with statutory auditor and regulator, following up with relevant parties to ensure all issues identified are remediated.
• Support the delivery of annual IT risk and control self-assessment exercises according to MAS regulatory notices/guidelines, internal enterprise IT policies, and standards.

Policy, Standards and Exception Management

• Communicate material changes to internal policies/standards to collaborators. Facilitate risk evaluations and exception handling to deviations from the policies, standards and regulatory requirements.

What you should have:

• University degree in one of the following or related disciplines (Computer Science, Computer Engineering, Information Security, Information Systems).
• 5 years or more of relevant work experience, including at least 2 years of experience in IT audit, risk management, compliance and/or governance roles, with particular expertise and knowledge of governance reporting of technology risk issues and cybersecurity.
• Rich working experience from financial industry, big tech firms or established auditing firms will be considered favorably.
• Experience and exposure in information security standards such as ISO27001 and PCIDSS will be an advantage.
• Preferably a holder of one or more of the following information security and audit qualifications: Security+ and CEH.
• Candidates with advanced level qualifications such as CISSP, CISA, CRISC, CCSP will have added advantage.
• Good Communication, Coordination and Interpersonal Skills. Good experience working alongside and opposite external auditors as well as regulatory bodies Meticulous and analytical traits Strong programme/Project Management skills High drive, energy and good demeanor over teamwork High levels of professional integrity.
• Eagerness to learn and develop one’s knowledge in information security and computing, especially on emerging computing fields such as cloud security, DevSecOps, etc.

Build a career with us as we help our customers and the community live Healthier, Longer, Better Lives.

You must provide all requested information, including Personal Data, to be considered for this career opportunity. Failure to provide such information may influence the processing and outcome of your application. You are responsible for ensuring that the information you submit is accurate and up-to-date.

This position will be pivotal for the development and implementation of an effective Technology Risk 2nd line of defense function providing risk oversight and advice.

The position will work in close collaboration with the local Technology function and the Group Technology Risk Management function.

Key responsibilities as a 2nd line function include:

• Provide support in implementing the Group/MAS technology risk framework and processes for governance, risk and control including review of current policies, guidelines, and procedures over technology risk.
• Implement effective proactive risk & control data analytics; define and build KPI and KRI reporting, and leverage existing metrics and risk dashboards to support effective qualitative and quantitative risk reporting.
• Proactively identify and effectively communicate emerging technology risks and opportunities to stakeholder at all levels of the organization.
• Regular reporting to Board and senior management on technology risk and security matters, including developments in the organization’s technology security risk profile in line with developments within and outside the organization, to ensure that the information security, cyber risks and threats are within the company’s risk tolerances.
• Increase awareness and enhance risk culture across the organization and provide day to day risk and control advise as trusted 2nd line subject matter expert.
• Champion and advocate the ownership of technology risk management, ensure risks are understood and managed within approved risk thresholds.
• Provide 2nd line reviews of risk assessments and business cases to identify key risks and gaps as required and provide assurance on the effectiveness of the technology and information risk controls and oversee the operationalization of control processes.
• Provide security and control review on major technology initiatives to ensure that Group/MAS Security standards and requirement are met, and risk mitigation are appropriately implemented.
• Support Technology Risk and Control Self-Assessment (RCSA) and effective risk management practices and recommend actions to be taken as needed via various risk committees for execution.
• Assist in IT related regulatory inspections and external audits and provide advisory when needed.