Back to job search

Security Governance and Controls- Top Tier Insurance Firm

  • Location:

    Hong Kong

  • Sector:


  • Job type:


  • Salary:


  • Contact:

    Sonal Nayyar

  • Contact email:

  • Job ref:


  • Published:

    15 days ago

  • Expiry date:


The role will be to manage a broad portfolio of important information security domains covering cyber training and awareness, policy and standards, third party security, regulatory /audit engagements, ISO27001/SOC2 certification and red team governance

  • Thought leadership on governance and control matters within the Group Information Security leadership team.
  • Lead information security training and awareness programs for the Group
  • Management of Information Security policy and standards and associated ISO27001 certification and SOC2 audits.
  • Lead governance practices and committees to ensure that cyber security risk is managed proactively, and controls are measured effectively across all AIA business units
  • Lead controls self-assessment for the AIA Group Technology Function and Business Units as relates to Finance and ITGC (IT General Controls) controls.
  • Ownership of first line information security controls framework
  • Management of 3rd party security assessments and partner engagements
  • Leadership for Group Information Security on regulatory and audit engagements

The world of contracting: Where stability meets flexibility | Wednesday 20 Oct | 1pm

Thinking of handing in your notice?

Download our Counteroffer Guide for advice on how to navigate counteroffers why they're made, reasons to accept or decline, and what you should consider before making your decision.