Senior Technical Security Lead, APAC Life Job Description The purpose of this role is to provide technical security assurance, guidance, and various levels of stakeholder influence and direction across the APAC (Life) region, focusing on project lifecycle and security-related improvements to IT/business processes. This is a hands-on type of role, and the incumbent will be responsible for ensuring that project deliveries are safe, secure, and compliant with our Information Security policy and standards. This role reports to the Head of Technical Security, primarily responsible for APAC Life but will also be a primary delegate in other areas that need leadership based on manager capacity/availability. Responsibilities Security assurance, assessments, and advisory for Chubb Life IT and Business projects. Build Permit & Agile. Security assurance, assessments, and advisory for Chubb Life IT for Ba U technical security matters, acting as the RISO Tech Sec lead to the APAC Life business. Participate in SDLC and Agile projects as the lead APAC Life RISO team security representative, driving good practice through consultancy and advice. Monitor and advise on security issue management identified through projects. Support security issue escalations to RISO and GIS leadership, helping frame and articulate technical security control gaps & weaknesses. Provide technical security advice and guidance where required, aligned to Chubb's Information Security policy, standards, and industry practice. Help support, implement, and monitor standards with regional/outsourced Life IT and Development. Collaborate, guide, and influence Life IT and Business units to correct non-compliant processes identified by security tools and processes, focusing on local requirements where necessary. Identify gaps in technical security policy and process; help develop standards and processes. Assist and contribute to strategic, global, and regional security project plans and deployment within Life. Provide metrics and mechanisms for gathering metrics for relevant areas of responsibility when required, supporting Technical Security and RISO Cyber governance requests and activities. Qualifications Good knowledge and working experience of securing applications managed in modern stacks such as CI/CD pipeline, Containers, and hybrid cloud/multicloud. Proven ability to adapt to a fast-paced and changing environment while driving for positive outcomes. Excellent communication skills, with the ability to explain technical issues to a mixed audience ranging from technical to business, project management to leadership. Knowledge of project lifecycles, with working experience of Agile project methodology. Good understanding of securing IT technologies such as networking, servers, Io T, etc. Demonstrated ability to understand and analyze complex business processes and technologies to make sound recommendations to constituents. Experience interpreting and applying information security standards and frameworks (e.g., ISO/IEC 27001/27002, PCI-DSS, NIST Cybersecurity Framework, etc.). Experience within the insurance industry or financial services preferred. At least 5-10 years of IT experience, working in a technical discipline. At least 5-10 years of working experience with security technologies. At least 5-10 years of experience in a technical managerial role, with exposure to senior management and decision-making. Seniority level Not Applicable Employment type Full-time Job function Information Technology Industries Insurance
#J-18808-Ljbffr