Total 7 student affairs director job vacancies in Singapore

We are seeking an experienced senior manager to lead our information security team, combining strong hands-on technical expertise as well as people management experience in the information security domain. They will lead a team to design and/or review application security including but not limited to penetration test, source code review, Cloud Security and various inter-connected application and infrastructures, especially in the area of authentication, authorization, information protection, and cryptographic controls for both on-premise and cloud environment. The role also has supervision of the AIA-SG IAM and Threat Intelligence Manager and their team.

This role is responsible for providing leadership in application security review for the strategic digital solutions across technology to ensure secure solutions for business growth. The person should have solid written and verbal communication skills.

WHAT YOU’LL BE DOING:

VAPT

Manage the AIA-SG Vulnerability Assessment and Penetration Testing team responsible for delivering the following services to AIA-SG, including Security Architecture:

Application Security

• Design and/or review application security architecture proposal for various security-driven initiatives or business-driven initiatives for on-premise and cloud environment.
• Manage external third-party for application penetration testing engagements.

Infrastructure Security

• Manage end-to-end infrastructure security activities, such as vulnerability management, servers’ security monitoring & hardening, infrastructure as a code, etc.
• Design and/or review infrastructure security architecture proposal for various security-driven initiatives for on-premise and cloud environment.

Cloud Security

• Manage compliancy level of AIA SG cloud security assets based on ongoing regular scanning according to the defined threshold.
• Evaluate the security aspect of new cloud-based solutions proposed by application development team, infrastructure team, or business users.
• Manage various cloud security BAU activities, such as assets provisioning, deprovisioning, hardening, etc.

Penetration Testing

• Manage end-to-end application security activities, including application penetration testing, authentication / authorization design / review, and DevSecOps design & roll out.
• Manage Third Party relationships with industry vendors who undertake security assessment services.
• Oversight of annual Pen testing schedule.

Information Security Architecture

• Lead a team to design and/or review application security architecture proposal for various security-driven initiatives or business-driven initiatives for on-premise and cloud environment.
• Design and/or review authentication and authorization flow of the applications, whether it is aligned with security best practices and organization's IT security technology policy & procedure in terms of the strength of access controls, session management, cache management, cookie management, token management, cryptographic algorithm, and information/data protection.
• Assess the security aspect of new proposed application tools / platforms from application team, and relevance/consequences to existing security architecture.
• Work closely with application development and infrastructure team to proactively stay on top of latest secure application design to deliver thorough security recommendation aligned with organization's IT security technology policy & procedure.

Identity and Access Management

• Supervise the AIA-SG IAM Manager and their team performing IAM Governance functions for the Business Unit.

Cyber Security & Security Incident Handling

• Work with Security Operation Centre (SOC) Team to ensure secure protection of AIA SG environment.
• Deploy new cyber security initiatives and roll out the platform together with SOC Team.
• Point of contact for security incident handling and investigation, starting from incident is identified, handled, and resolved.

Security Advisory

• Provide feasible security recommendations or guidance based on queries / changes initiated by application development team, infrastructure team, or business users.
• Facilitate challenging security conversations and provide acceptable solutions where IT standards are contradicting with business demands to achieve acceptable business solutions without sacrificing security and compliance aspects.

Managerial Responsibilities

• Lead promotion of activities to increase information security within your teams to embed and continuously improve adherence to good practice.
• Drive a continues Learning and Development program for staff training. (with inhouse and external training programs).

WHAT WE ARE LOOKING FOR:

• University degree in one of the following or related disciplines (Computer Science, Computer Engineering, Information Security, Information Systems).
• Minimum 15 years of experiences of information security domain, especially in Application Security, Infrastructure Security and Cloud Security.
• Preferable to have application development or infrastructure operation background with hands-on experiences of designing and/or reviewing application security or infrastructure security.
• Hands-on information security experience in the Multiple Cloud Environment (SaaS, PaaS and IaaS) and Cyber Incident management.
• Certifications related to security architecture or Cloud Security is preferable, such as CCSP, Azure DevOps certification, Azure Solutions Architect certification, etc.
• Preferably a holder of one or more of the following information security and audit qualifications: CISSP, CISA, CRISC, CCSP.
• Good knowledge of latest security technologies and cyber landscape in a highly regulated industry.
• Good interpersonal and communication skill.
• Strong leadership with a high integrity, proactive mindset, and strong ownership.
• Working experiences in insurance / banking / IT industry is preferred.
• Leading DevSecOps tool experience such as Snyk, Veracode, SonarQube
• Infrastructure Security: Windows, Linux, AS400.
• Application framework and Security: NodeJS, ReactJS, .NET
• Security Advisory and Assessment.
• Security Incident Management.
• CI/CD pipelines: Azure DevOps, Bamboo, Jenkins, GitHub, Bitbucket.

We are seeking an experienced senior manager to lead our information security team, combining strong hands-on technical expertise as well as people management experience in the information security domain. They will lead a team to design and/or review application security including but not limited to penetration test, source code review, Cloud Security and various inter-connected application and infrastructures, especially in the area of authentication, authorization, information protection, and cryptographic controls for both on-premise and cloud environment. The role also has supervision of the AIA-SG IAM and Threat Intelligence Manager and their team.

This role is responsible for providing leadership in application security review for the strategic digital solutions across technology to ensure secure solutions for business growth. The person should have solid written and verbal communication skills.

WHAT YOU’LL BE DOING:

VAPT

Manage the AIA-SG Vulnerability Assessment and Penetration Testing team responsible for delivering the following services to AIA-SG, including Security Architecture:

Application Security

• Design and/or review application security architecture proposal for various security-driven initiatives or business-driven initiatives for on-premise and cloud environment.
• Manage external third-party for application penetration testing engagements.

Infrastructure Security

• Manage end-to-end infrastructure security activities, such as vulnerability management, servers’ security monitoring & hardening, infrastructure as a code, etc.
• Design and/or review infrastructure security architecture proposal for various security-driven initiatives for on-premise and cloud environment.

Cloud Security

• Manage compliancy level of AIA SG cloud security assets based on ongoing regular scanning according to the defined threshold.
• Evaluate the security aspect of new cloud-based solutions proposed by application development team, infrastructure team, or business users.
• Manage various cloud security BAU activities, such as assets provisioning, deprovisioning, hardening, etc.

Penetration Testing

• Manage end-to-end application security activities, including application penetration testing, authentication / authorization design / review, and DevSecOps design & roll out.
• Manage Third Party relationships with industry vendors who undertake security assessment services.
• Oversight of annual Pen testing schedule.

Information Security Architecture

• Lead a team to design and/or review application security architecture proposal for various security-driven initiatives or business-driven initiatives for on-premise and cloud environment.
• Design and/or review authentication and authorization flow of the applications, whether it is aligned with security best practices and organization's IT security technology policy & procedure in terms of the strength of access controls, session management, cache management, cookie management, token management, cryptographic algorithm, and information/data protection.
• Assess the security aspect of new proposed application tools / platforms from application team, and relevance/consequences to existing security architecture.
• Work closely with application development and infrastructure team to proactively stay on top of latest secure application design to deliver thorough security recommendation aligned with organization's IT security technology policy & procedure.

Identity and Access Management

• Supervise the AIA-SG IAM Manager and their team performing IAM Governance functions for the Business Unit.

Cyber Security & Security Incident Handling

• Work with Security Operation Centre (SOC) Team to ensure secure protection of AIA SG environment.
• Deploy new cyber security initiatives and roll out the platform together with SOC Team.
• Point of contact for security incident handling and investigation, starting from incident is identified, handled, and resolved.

Security Advisory

• Provide feasible security recommendations or guidance based on queries / changes initiated by application development team, infrastructure team, or business users.
• Facilitate challenging security conversations and provide acceptable solutions where IT standards are contradicting with business demands to achieve acceptable business solutions without sacrificing security and compliance aspects.

Managerial Responsibilities

• Lead promotion of activities to increase information security within your teams to embed and continuously improve adherence to good practice.
• Drive a continues Learning and Development program for staff training. (with inhouse and external training programs).

WHAT WE ARE LOOKING FOR:

• University degree in one of the following or related disciplines (Computer Science, Computer Engineering, Information Security, Information Systems).
• Minimum 15 years of experiences of information security domain, especially in Application Security, Infrastructure Security and Cloud Security.
• Preferable to have application development or infrastructure operation background with hands-on experiences of designing and/or reviewing application security or infrastructure security.
• Hands-on information security experience in the Multiple Cloud Environment (SaaS, PaaS and IaaS) and Cyber Incident management.
• Certifications related to security architecture or Cloud Security is preferable, such as CCSP, Azure DevOps certification, Azure Solutions Architect certification, etc.
• Preferably a holder of one or more of the following information security and audit qualifications: CISSP, CISA, CRISC, CCSP.
• Good knowledge of latest security technologies and cyber landscape in a highly regulated industry.
• Good interpersonal and communication skill.
• Strong leadership with a high integrity, proactive mindset, and strong ownership.
• Working experiences in insurance / banking / IT industry is preferred.
• Leading DevSecOps tool experience such as Snyk, Veracode, SonarQube
• Infrastructure Security: Windows, Linux, AS400.
• Application framework and Security: NodeJS, ReactJS, .NET
• Security Advisory and Assessment.
• Security Incident Management.
• CI/CD pipelines: Azure DevOps, Bamboo, Jenkins, GitHub, Bitbucket.

We are seeking an experienced senior manager to lead our information security team, combining strong hands-on technical expertise as well as people management experience in the information security domain. They will lead a team to design and/or review application security including but not limited to penetration test, source code review, Cloud Security and various inter-connected application and infrastructures, especially in the area of authentication, authorization, information protection, and cryptographic controls for both on-premise and cloud environment. The role also has supervision of the AIA-SG IAM and Threat Intelligence Manager and their team.

This role is responsible for providing leadership in application security review for the strategic digital solutions across technology to ensure secure solutions for business growth. The person should have solid written and verbal communication skills.

WHAT YOU’LL BE DOING:

VAPT

Manage the AIA-SG Vulnerability Assessment and Penetration Testing team responsible for delivering the following services to AIA-SG, including Security Architecture:

Application Security

• Design and/or review application security architecture proposal for various security-driven initiatives or business-driven initiatives for on-premise and cloud environment.
• Manage external third-party for application penetration testing engagements.

Infrastructure Security

• Manage end-to-end infrastructure security activities, such as vulnerability management, servers’ security monitoring & hardening, infrastructure as a code, etc.
• Design and/or review infrastructure security architecture proposal for various security-driven initiatives for on-premise and cloud environment.

Cloud Security

• Manage compliancy level of AIA SG cloud security assets based on ongoing regular scanning according to the defined threshold.
• Evaluate the security aspect of new cloud-based solutions proposed by application development team, infrastructure team, or business users.
• Manage various cloud security BAU activities, such as assets provisioning, deprovisioning, hardening, etc.

Penetration Testing

• Manage end-to-end application security activities, including application penetration testing, authentication / authorization design / review, and DevSecOps design & roll out.
• Manage Third Party relationships with industry vendors who undertake security assessment services.
• Oversight of annual Pen testing schedule.

Information Security Architecture

• Lead a team to design and/or review application security architecture proposal for various security-driven initiatives or business-driven initiatives for on-premise and cloud environment.
• Design and/or review authentication and authorization flow of the applications, whether it is aligned with security best practices and organization's IT security technology policy & procedure in terms of the strength of access controls, session management, cache management, cookie management, token management, cryptographic algorithm, and information/data protection.
• Assess the security aspect of new proposed application tools / platforms from application team, and relevance/consequences to existing security architecture.
• Work closely with application development and infrastructure team to proactively stay on top of latest secure application design to deliver thorough security recommendation aligned with organization's IT security technology policy & procedure.

Identity and Access Management

• Supervise the AIA-SG IAM Manager and their team performing IAM Governance functions for the Business Unit.

Cyber Security & Security Incident Handling

• Work with Security Operation Centre (SOC) Team to ensure secure protection of AIA SG environment.
• Deploy new cyber security initiatives and roll out the platform together with SOC Team.
• Point of contact for security incident handling and investigation, starting from incident is identified, handled, and resolved.

Security Advisory

• Provide feasible security recommendations or guidance based on queries / changes initiated by application development team, infrastructure team, or business users.
• Facilitate challenging security conversations and provide acceptable solutions where IT standards are contradicting with business demands to achieve acceptable business solutions without sacrificing security and compliance aspects.

Managerial Responsibilities

• Lead promotion of activities to increase information security within your teams to embed and continuously improve adherence to good practice.
• Drive a continues Learning and Development program for staff training. (with inhouse and external training programs).

WHAT WE ARE LOOKING FOR:

• University degree in one of the following or related disciplines (Computer Science, Computer Engineering, Information Security, Information Systems).
• Minimum 15 years of experiences of information security domain, especially in Application Security, Infrastructure Security and Cloud Security.
• Preferable to have application development or infrastructure operation background with hands-on experiences of designing and/or reviewing application security or infrastructure security.
• Hands-on information security experience in the Multiple Cloud Environment (SaaS, PaaS and IaaS) and Cyber Incident management.
• Certifications related to security architecture or Cloud Security is preferable, such as CCSP, Azure DevOps certification, Azure Solutions Architect certification, etc.
• Preferably a holder of one or more of the following information security and audit qualifications: CISSP, CISA, CRISC, CCSP.
• Good knowledge of latest security technologies and cyber landscape in a highly regulated industry.
• Good interpersonal and communication skill.
• Strong leadership with a high integrity, proactive mindset, and strong ownership.
• Working experiences in insurance / banking / IT industry is preferred.
• Leading DevSecOps tool experience such as Snyk, Veracode, SonarQube
• Infrastructure Security: Windows, Linux, AS400.
• Application framework and Security: NodeJS, ReactJS, .NET
• Security Advisory and Assessment.
• Security Incident Management.
• CI/CD pipelines: Azure DevOps, Bamboo, Jenkins, GitHub, Bitbucket.

Position Objective:

Identifies and evaluates potential information security risks and ensures their corresponding risk exposures are appropriately addressed such that the company’s image and value are protected. Lead the information security team and advise senior management on information security trends to drive cyber security roadmap and enhance our cyber security readiness for the current cyber landscape and uplift the capabilities to tackle the future emerging cyber risks.

Key Responsibilities:

Information Security and Governance Management

Advances the overall Information Security and technology risk posture of the company, embedding risk culture and programs to secure the IT environment through policy governance, innovative security solutions, process and controls and initiatives, training and awareness programmes, and risk reviews.

Information Security Governance

Establishes cyber risk strategy, administer technology policies and processes, deliver awareness programs and provides risks advisory.

Technology Risk Assurance & Compliance

Manage the IT Compliance and Risk Assurance function to embed ensure department compliance to various regulations, policies, procedures and standards through risk-controls assessments, deviation handling and proper closure to all outstanding issues.

Application Security

Identifies and evaluates application security risks and ensures the applications are designed and developed securely meeting all the Enterprise application security standard and regulatory requirements, identified information security risks are appropriately addressed before system go-live.

Information Security Operations

Manage the outsourced operational IT security to ensure high levels of integrity, confidentiality, and availability of IT resources, thus being timely and effective in meeting business and regulatory needs.

Puts in place the structure in place to manage cyber security operations and respond effectively to cyber security incidents in a timely manner.

Software Quality Assurance

Ensure compliance to the quality processes (QP) in the systems supporting AIA Singapore through appropriate guidance, controls, and reviews in the SDLC framework.

Budgetary or Financial Control

Responsible for budget of Information Security and Governance unit.

Others

· Downward trend in internal audit overall assessments – reduction in Needs Major Improvements.

· Downward trend in PwC ICFR audit assessments

· Downward trend in security incidents and less DP incidents

· Uplift Cyber Security process, controls, and maturity level

· Support for the Cyber Security score in the annual MAS CRAFT report

· Performs other responsibilities and duties periodically assigned by CTO to meet operational and/or other requirements.

At AIA we’ve started an exciting movement to create a healthier, more sustainable future for everyone.

It’s about finding new ways to not only better people's lives, but to better the communities and environments we live in. Encompassing our ambition of helping a billion people live Healthier, Longer, Better Lives by 2030.

And to get there, we need ambitious people who believe in playing an important part in shaping that future. People seeking unmatched career and personal growth opportunities, who are driven to work with, and learn from some of the most inspiring and supportive leaders in the business.

Sound like you? Then read on.

WE ARE LOOKING FOR…

An enthusiastic and energetic Events Analyst to create, drive and execute events that excite, engage and motivate AIA's internal customers and distribution partners to meet Tied Distribution targets and business growth.

WHAT YOU’LL BE DOING

Strategizes and implements agency-wide and location-based sales initiatives in order to achieve Agency location key result areas in

• Value of New Business,
• Number of Active FSCs,
• New FSC Activity Ratio,
• Number of Premier Agents (MDRT), and
• Number of Quality agencies (Agency Performance Dashboard)

Engages Agency Leaders and producers regularly to build strong partnership relationships

Designs programs and incentives to direct the sales behavior of agency distributors towards achieving key result area objectives.

Enforces agency performance standards to promote business quality Identifies and groom aspiring agency producers to become agency leaders

This role also performs other responsibilities and duties periodically assigned by immediate manager in order to meet business requirements.

WHAT WE ARE LOOKING FOR

• Degree with 5 to 8 years of Managerial experience in Agency channel management
• M5, M9, M9A, HI, FLMI certifications preferable
• Knowledge of life insurance industry in Singapore and/or Asia
• Proficient communications skills to effectively explain policies with Agency distribution force and internal stakeholders

Build a career with us as we help our customers and the community live Healthier, Longer, Better Lives.

You must provide all requested information, including Personal Data, to be considered for this career opportunity. Failure to provide such information may influence the processing and outcome of your application. You are responsible for ensuring that the information you submit is accurate and up-to-date.

This position will be pivotal for the development and implementation of an effective Technology Risk 2nd line of defense function providing risk oversight and advice.

The position will work in close collaboration with the local Technology function and the Group Technology Risk Management function.

Key responsibilities as a 2nd line function include:

• Provide support in implementing the Group/MAS technology risk framework and processes for governance, risk and control including review of current policies, guidelines, and procedures over technology risk.
• Implement effective proactive risk & control data analytics; define and build KPI and KRI reporting, and leverage existing metrics and risk dashboards to support effective qualitative and quantitative risk reporting.
• Proactively identify and effectively communicate emerging technology risks and opportunities to stakeholder at all levels of the organization.
• Regular reporting to Board and senior management on technology risk and security matters, including developments in the organization’s technology security risk profile in line with developments within and outside the organization, to ensure that the information security, cyber risks and threats are within the company’s risk tolerances.
• Increase awareness and enhance risk culture across the organization and provide day to day risk and control advise as trusted 2nd line subject matter expert.
• Champion and advocate the ownership of technology risk management, ensure risks are understood and managed within approved risk thresholds.
• Provide 2nd line reviews of risk assessments and business cases to identify key risks and gaps as required and provide assurance on the effectiveness of the technology and information risk controls and oversee the operationalization of control processes.
• Provide security and control review on major technology initiatives to ensure that Group/MAS Security standards and requirement are met, and risk mitigation are appropriately implemented.
• Support Technology Risk and Control Self-Assessment (RCSA) and effective risk management practices and recommend actions to be taken as needed via various risk committees for execution.
• Assist in IT related regulatory inspections and external audits and provide advisory when needed.

At AIA we've started an exciting movement to create a healthier, more sustainable future for everyone. It's about finding new ways to not only better people's lives, but to better the communities and environments we live in. Encompassing our ambition of helping a billion people live Healthier, Longer, Better Lives by 2030. And as part of our marketing, distribution & partnership team, you'll play a vital part in advancing this movement. From inspiring meaningful connections with customers, partners and other stakeholders, to delivering purpose-led brand positioning and messaging, you'll be making a positive, healthy impact across all channels. You will have a unique and important part to play in helping more people live Healthier, Longer, Better Lives. So if you believe in inspiring a better future, read on. About the Role At AIA we've started an exciting movement to create a healthier, more sustainable future for everyone. It's about finding new ways to not only better people's lives, but to better the communities and environments we live in. Encompassing our ambition of helping a billion people live Healthier, Longer, Better Lives by 2030. And as part of our marketing, distribution & partnership team, you'll play a vital part in advancing this movement. From inspiring meaningful connections with customers, partners and other stakeholders, to delivering purpose-led brand positioning and messaging, you'll be making a positive, healthy impact across all channels. You will have a unique and important part to play in helping more people live Healthier, Longer, Better Lives. Primarily responsible for business development which includes achieving his/her location's Key Result Areas (KRAs) as determined by Agency Management. Responsible for overseeing the success of his/her location's sales activities and managing the overall production numbers together with his/her SDOA. Strategic and Operational Alignment. Roll out strategic plans of company to agency force and align agency leader's goals and expectations accordingly. To minimize the gap between management and agency force. Driving the company's key initiatives and growth by working together with the SDOA to strategize and plan for location sales activities and programs Job Requirements Education - Degree Holder Experience Preferably with at least 5 - 8 years working experience. Experience in insurance related sales environment. Certifications/licenses - CMFAS M5, M9, M9A, HI Special skills preferred Microsoft Office, particularly in Excel, Word & PowerPoint Build a career with us as we help our customers and the community live Healthier, Longer, Better Lives. You must provide all requested information, including Personal Data, to be considered for this career opportunity. Failure to provide such information may influence the processing and outcome of your application. You are responsible for ensuring that the information you submit is accurate and up-to-date.