Consultant, Technology Risk, Enterprise Risk Management Department

At AIA we've started an exciting movement to create a healthier, more sustainable future for everyone.

If you believe in developing a better tomorrow, read on.

About the Role

An agile and proactive individual who will play a pivotal role in the development and implementation of an effective 2nd Line of Defence (2LOD) Technology Risk Team. The individual will be responsible for providing risk oversight and advice and will collaborate closely with the local Technology, Information Security and Group Technology Risk Management functions to drive a strong risk culture across Technology.

Provide exceptional support and advice to all stakeholders in:

• Technology Risk Advice and Guidance: Provide risk, control and compliance advice to stakeholders at all levels
• Policy and Framework Implementation: Provide support in implementing the Group/ AIAS technology risk (including AI risk) framework and policy requirements
• Risk Profiling: Facilitate the identification and assessment of risks and controls. Facilitate regular reviews and updates to established risk profiles based on trigger events
• Controls - Assist Technology to design, assess and measure a control environment that mitigates the risks, meets regulatory obligations, and complies with internal policies
• Incident management - Provide guidance and support in performing incident root cause analysis and identifying control breakdowns for technology related incidents
• Key indicator and trend analysis: Implement risk & control data analytics. Define and build KRI reporting to support effective risk reporting
• Reporting: Provide regular reporting to Board and senior management on technology risk and security matters
• Project Risk: Provide risk advice on major Technology and Business initiatives to ensure that Group/AIAS Security requirements are met, and the appropriate controls are implemented
• Training and Awareness: Increase Technology Risk awareness and enhance risk culture across the organization via regular training sessions
• Regulatory and Audit Engagements: Assist with IT related regulatory inspections and internal/external audits.

Minimum Job Requirements:

You possess a can-do attitude and exceptional communication skills for this highly visible role. You will also:

• Possess 8+ years of technology risk management experience preferably in the insurance or financial services sector with a Bachelor or Master's degree holder in Information Technology, Risk Management or related disciplines
• Solid understanding of current/emerging enterprise technology (eg cloud, DevOps, artificial intelligence, machine learning technologies, data science etc.) and security regulations, frameworks, standards and controls, including MAS requirements and controls
• Experience in developing policies or establishing governance frameworks, including those related to AI risk management
• Ideally have hands on data analytics expertise to enable deep analysis and proactive identification of emerging risk and control issues
• Relevant certifications essential e.g. Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC)
• Knowledge of relevant programming languages / tool sets such as Python, PowerBI, Office 365 etc and experience in first line technical roles such as developer, programmer, architect, software engineering, data analysts will be an advantage.

Believe in better with AIA.If you work at AIA, you play an important part in this movement. Which is why we give you every opportunity to learn, grow and shape your career - your way!

#LI-SF1