The position requires good understanding of technology and information security risks and controls, disaster recovery, and solid communication, presentation and influencing skills. This position will operate across multiple markets and their businesses, functions, and geographies, to promote and enhance awareness of risks and controls.
Position Responsibilities:
1. Strategy execution and planning support
Execute agreed AIRM strategic priorities, annual plans and roadmap activities under the direction of the Director and AIRM leadership, ensuring deliverables remain aligned with agreed objectives and timelines.
Provide planning and administrative support for strategy and business reviews, including scheduling, information gathering, document preparation, consolidation of inputs and action tracking.
Plan and coordinate AIRM engagement activities, including offsite activities, team meetings, leadership sessions, workshops, knowledge-sharing sessions and recognition activities.
Coordinate onboarding and team integration activities that help colleagues understand AIRM priorities, ways of working and key stakeholders.
Promote collaboration and connectivity across AIRM teams, locations and risk domains .
2. Governance and committee management coordination
Coordinate AIRM governance forums, including the Asia Information Risk Committee (AIRC), through forward agenda planning, preparation and quality review of materials, meeting support, and tracking of decisions and actions.
Prepare clear decision papers, briefing notes and governance materials that set out the issue, risk implications, options, dependencies and recommended action.
Maintain governance artefacts, mandates, calendars, decision logs and action trackers, and follow up with accountable owners to support timely closure.
3. Executive reporting, risk analytics and management information
Coordinate quarterly and ad hoc Asia information risk reporting, working with risk owners and subject matter experts to obtain complete, accurate and timely inputs.
Produce concise, decision-oriented reporting for senior management and committees, covering risk exposure, control effectiveness, incidents, issues, remediation, delivery status and emerging themes.
Apply consistent data definitions, ownership, quality checks and reporting standards, and challenge material gaps or inconsistencies before submission.
Provide trend analysis, forward-looking insights and practical recommendations rather than status reporting alone.
Support the development and improvement of dashboards, including opportunities to use Power BI and workflow automation to reduce manual effort and improve transparency.
4. Second-line risk oversight and advisory
Provide second-line Information Risk Management (IRM) oversight of first-line defense activities related to change management, third-party risk, incident response, business continuity, and disaster recovery, ensuring alignment with the internal IRM framework.
Monitor material risk themes, issues, exceptions and remediation progress, and escalate concerns through the appropriate governance route, in accordance with IRM standards.
Deliver market-specific risk insights and advisory support to stakeholders, and guide market teams on global IRM initiatives and ensure local alignment.
Required Qualifications:
Holds a Bachelor's degree or equivalent qualification in Information Technology, Information Security, Risk Management, or a related discipline.
Minimum 3 – 5 years of relevant experience in information risk management or information security management.
Sound technology background with risk management sense.
Broad knowledge of financial services/insurance business and related products.
Solid written and oral communication and presentation skills.
Detail-oriented with good analytical, critical thinking and problem-solving skills with the ability to think strategically.
Solid influencing skills with the ability to build effective relationships, both within and across…