Principal Information Security Advisor

At AIA we don’t simply believe in being ‘the best’. We believe in better - because there’s no limit to how far ‘better’ can take us. Everything we do is driven by our purpose to make a difference by helping people embrace Healthier, Longer, Better Lives. And every one of our people has an important part role to play. If you want to make a difference by helping shape a healthier, better-protected Australia, read on.

The Opportunity:
The Principal Information Security Advisor supports the General Manager in an interim capacity whilst the Head of Information Security & Operations role is recruited. Contributes to the successful enablement of the AIA Australia enterprise-wide Technology, Digital & Analytics (TDA) strategy, vision and roadmap.

Provides guidance for the Information Security & Operations function which is responsible for safeguarding critical information assets for AIA Australia.

Oversees alignment to Group Office and digital transformation agenda by ensuring security controls are operating effectively in the technology environment and to treat security as an enabler to strategy.- Provide guidance for the information security operations function of AIA Australia
- Lead the cyber hygiene program to ensure security controls are operating within risk appetite
- Oversee information security operations to identify important trends and opportunities for improvement
- Drive implementation of security technologies within the business including Endpoint Detection & Response (EDR), Security Scanning & Patching, Network Access Control, Data Loss Prevention, Firewalls, IDS/IPS, Web-Application Firewalls and Identity Access Management (IAM) controls.
- Recommend courses of action based on analysis of both existing and emerging threats. Deliver reports, briefings, and assessments to leadership to facilitate their understanding of emerging issues
- Provide oversight to incident response activities (triage, root cause analysis, escalations, notifications, communication, etc.) and develop strategies to contain and eradicate the incident. Ensure technology operations are recovered seamlessly
- Develop and implement continuous information security awareness program for AIA Australia employees, contractors and service providers
- Execute information security strategy, policies and processes to ensure compliance with AIA’s group-wide security policies and frameworks

Why choose AIA:

- At AIA, we’ve made a promise to help people live healthier, longer, better lives. And it starts with our own people
- AIA Australia is part of the larger regional Asia AIA Group, which is the largest public listed life insurance company in the Asia-Pacific region
- Access our training and development to build on your current skills
- Career development through internal mobility opportunities
- Work for a business helping millions of Australians and make a difference to someone’s life everyday
- Enjoy wonderful Health and Wellbeing initiatives that support you
- Work with supportive and inclusive working environment
- Flexible working arrangement

At AIA Australia, we’re proud to help guide, support and protect the wellbeing of over 3.5 million Australians. Through life and health insurance, financial wellbeing and our total wellbeing ecosystem that includes AIA Vitality - the world’s leading science-backed wellbeing programme - we’ve started a movement to make Australia the healthiest, best protected nation in the world.

As part of the AIA Group - the largest independent publicly listed pan-Asian life insurance group with a presence in 18 markets in Asia-Pacific - it is our ambition to engage one billion people to live Healthier, Longer, Better Lives by 2030. Lots of companies like to say they’re different. What makes us truly different at AIA, is the difference we make in people’s lives.

AIA is different. Are you?

If you want to be part of an organisation that helps people live better every