Manager Information Security Technology and Architecture

BELIEVE IN BETTER

Do you believe in shaping a better, healthier, more sustainable future through the power of digital?

At AIA we’ve started an exciting movement to create a healthier, more sustainable future for everyone.
It's finding new ways to not only better people's lives, but to better the communities and environments we live. As pioneering innovators for over 100 years, we’re now transforming our organisation to be faster, simpler, and more connected. Because we want to be even better equipped to develop digital solutions and experiences that help more people live Healthier, Longer, Better Lives.

And to get there, we need people with tech/digital/analytics expertise and passion to help develop positive sustainable change through digitally enhanced experiences that will impact the lives of millions of people and create a healthier future for everyone.

Sound like you? Then read on.

The opportunity:
The overall purpose of this role is to protect AIA’s brand, reputation, financial position, regulatory position and strong commitment to customer satisfaction in AIA New Zealand.

Security Management

You will provide Technology Security and Security Architecture capability and guidance to business and technology areas within AIA NZ.

The primary focus on this role is to ensure proactive Information Security Management in BAU and Projects, as well as provide Information Security Architecture guidance. The identification, reporting of technology and information security-based risks and issues are considered a key enabler to all strategic projects and BAU activities.

The role will also provide technical security-based assurance within AIA NZ’s technology environment. This aspect of the role will focus on assessing, defining, and delivering security based architectural solutions.

Information Security Training to staff is also a requirement to ensure awareness of security responsibilities in all areas.

Security Operations

To provide Information Security Operations and Information Security technical advice to projects, infrastructure and across all business as required. To provide hands on approach involving technical knowledge and implementation knowledge of Information security environments

Key responsibilities include:
Information Security Management and Governance- Execution of technology security management, IT and information security strategy and processes to ensure compliance with AIA’s security policies and frameworks.- Be pragmatic in thinking and approach to Information Security Solutions- Manage and ensure effective implementation of technology security management and frameworks, policies, programs and processes.- Manage the Weekly Security Dashboards KPIs to ensure NZ are in compliance with security metrices.- Drive remediation of any weaknesses identified and manage risk.- Responsible for analysing technology and security threats.- Manage and review project-based technology and security issues on processes, projects and systems and identification of new and emerging security concerns and risks.- Ensure an appropriate and effective monitoring and reporting program is defined.- Recommend treatments to manage technology and security risks. Work in partnership with stakeholders to design and implement those treatments.- Maintain and define Information Policy, standards and controls.- Manage, operate and enforce Information Security Policy and chair relevant Information Security Committees.- Conduct regular and ad-hoc security compliance checking activities to AIA Standards.- Contact point, Management and Governance of Information Security Vendors in security aspect ensuring Third Party Security Assessments are completed and reviewed on an ongoing basis.

Information Security Operation- Manage security technical environments to ensure operation teams are adhering to security policies, standards and processes.- Ensure compliance against AIA standards as well as industry standards (PCI).- Plan and conduct security training (technical).- Analyse technology threats and report to Management.- Conduct vulnerability management scans and technical remediation tasks.- Conduct security log maintenance.

Information Security Architecture- Provide security architectural advice to all technology projects to ensure ongoing management and reduction of risk.- Utilise technical and architectural skills to work with technology teams and projects to assess and define security based architectural solutions to ensure delivery of a secure operating environment.- Develop information security designs for systems and networks that require processing of multiple data classification levels.

Other Information Security Functions- Provide support in Information security aspect to the review processes performed by external auditors, internal auditors and compliance officers.- Provide support and security management response to security assessment performed by business partners.- Guide AIA technology operations on Security