IT Security & Data Protection, Specialist

As pioneering innovators for over 100 years, we’re now transforming our organisation to be faster, simpler and more connected. Because we want to be even better equipped to develop digital solutions and experiences that help more people live Healthier, Longer, Better Lives.

To get there, we need people with tech/digital/analytics expertise and passion to help develop positive, sustainable change through digitally enhanced experiences that will impact the lives of millions of people and create a healthier future for everyone.

• We are seeking a Data Protection and IT Security Governance Specialist with hands-on experience in implementing and managing enterprise-level security and compliance controls. The ideal candidate will have a strong background in data protection, IT risk management, and governance tools (e.g., eGRC, MSII), and will be adept at translating regulatory requirements into actionable controls across both cloud and on-premises environments.
• This position is responsible for ensuring the organization’s data protection and IT security governance frameworks are effectively implemented, monitored, and continuously improved. The role focuses on embedding robust data protection controls, managing IT risk assessments, supporting audits, driving end-user awareness, and maintaining governance dashboards to ensure compliance and timely escalation of issues.

• Design and Implementation: Lead the design and deployment of robust data protection controls in alignment with AIA Group’s data governance framework and applicable local regulations, including the Data Law and Personal Data Protection Law.
• Ensure appropriate classification, handling, and protection of sensitive data across systems and services.
• Collaborate with application, business and infrastructure teams to embed privacy-by-design principles.
• Monitoring & Continuous Improvement: Continuously monitor data protection measures and drive enhancements based on evolving regulatory requirements, threat landscape, and internal audit findings.

• Lead and support IT risk assessments using enterprise governance platforms (e.g., eGRC, MSII).
• Identify control gaps and recommend remediation plans to mitigate risks.
• Risk Register Management: Maintain accurate and up-to-date risk registers, ensuring timely documentation, tracking, and reporting of risk mitigation activities to relevant governance bodies.

• Coordinate with internal and external auditors to provide evidence and responses for IT security and data protection audits.
• Track audit findings and ensure closure of remediation actions within agreed timelines.

• Maintain and monitor Security Assurance Framework (SAF) and Governance Information System (GIS) dashboards.
• Escalate critical issues and non-compliance to relevant stakeholders in a timely manner.
• Provide regular reporting and insights to senior management.

• Develop and deliver security awareness campaigns and training programs tailored to different user groups.
• Promote a culture of security and data protection across the organization.

• B.A Degree or higher in Information Technology related field.;
• 5 years of experiences of information security domain, especially hands on experience for data protection, IT audit, IT security governance;
• Hands on experience in database query such as SQL, Python;
• Familiarity with IT security requirement such as PCI DSS, GDPR, ISO 27001, NIST;
• Security Certifications/licenses: CISA, CISM, CRISC, CISSP is a plus;
• Good communication skills, especially in English to effectively work and negotiate with internal/external teams;
• Work under high pressure, goal oriented, and inspired to perform without outside help.

Build a career with us as we help our customers and the community live Healthier, Longer, Better Lives.

You must provide all requested information, including Personal Data, to be considered for this career opportunity. Failure to provide such information may influence the processing and outcome of your application. You are responsible for ensuring that the information you submit is accurate and up-to-date.