BE THE DIFFERENCE

At AIA we don’t simply believe in being ‘the best’. We believe in better – because there’s no limit to how far ‘better’ can take us. Everything we do is driven by our purpose to make a difference by helping people embrace Healthier, Longer, Better Lives. And every one of our people has an important role to play. If you want to make a difference by helping shape a healthier, better-protected Australia, read on.

The opportunity:

The Technology Controls & Governance Practice Lead is a key member of the extended Technology Leadership Team (Tech ELT) (N-3) and contributes to the successful and sustainable IT risk and control management practice in supporting the AIA Australia enterprise-wide IT strategy, vision and roadmap.

Accountable for supporting the Head of Information Security, Technology Controls and Governance by leading Technology Controls & Governance for AIA Australia, and responsible for implementing framework and governance of Technology, Information Security and Data risk controls.

In addition, the role will develop and implement local technology and data management policy framework for AIA Australia, with alignment to Group Office, and will manage and oversee regulatory, audit, customer and supplier security assessment requests to and for Technology. Providing leadership in driving change by evaluating and implementing strategies to continuously improve the technology control environment and to treat risk as an enabler to IT strategy.

To do this successfully you will:

• Lead and manage AIA Australia’s Technology Controls and Governance team
• Act as the subject matter expert on Technology Controls and Governance in providing advisory on the emerging risk concerns.
• Enhance the awareness of accountability and support the Technology Executive and Leadership Team
• Drive the continuous improvement of existing Technology Controls and Governance team with the use of emerging technologies such as GenAI.
• Partner with technology teams to maintain end-to-end visible and measurable IT risk profile, including data risk.
• Drive continuous improvement initiatives to ensure AIA Australia’s technology control environment is meeting the latest trends of technology, regulatory development and business partners’ expectations
• Develop and optimise management reports and dashboards for different risk management forums.
• Escalate in a timely manner the technology risk matters for the right level of attention and support.
• Work closely with business Line 1 or Line 1 and Line 2 Risk community to maintain collaborative and positive relationships on risk community and to drive continuous uplift of Technology risk posture
• Partner with other risk champions to advocate the risk culture.
• Lead and motivate a diversified team towards higher levels of performance aligned with AIA vision and values and enable the resiliency of the Technology Controls and Governance capability in Australia.

Successful applications will demonstrate:

• Experience in technology control and risk management, technology audit, information security, and technology compliance function. Insurance industry experience is preferred
• Past experience as people manager in managing a distributed or remote team is preferred
• Practical experience in managing IT risk and control over cloud environment and emerging technologies (e.g. AI / GenAI / MCPs) are required
• Detail-oriented with excellent data-driven analytical skills for strategic insights and advices
• The ability to build and maintain an efficient, effective and repeatable audit and regulatory engagement framework, including knowledge retention and record management
• Resilience to work under pressure with tight resources yet maintaining quality of deliverables
• Capability to drive the initiatives to solve complex problems over technology risk and controls on practical, effective and sustainable manner.
• Strong stakeholder management skills with people from diversified backgrounds across multiple locations and jurisdictions.
• Strong partnership across the enterprise to manage the IT risk profile, including:
• Strong awareness and practical knowledge of Australian regulatory requirements such as APRA CPS 234, CPS230, CPS 220, ACSC Essential Eight, SoCI Act, Privacy Act, ISM, FAR.

Why choose AIA:

At AIA, we’ve made a promise to help people live healthier, longer, better lives. And it starts with our own people.

• Flexible working arrangements to suit your lifestyle

• Access our training and development to build on your current skills

• Career development through internal mobility opportunities

• Work for a business helping millions of Australians and make a difference to someone’s life everyday

• Access additional leave days a year to recharge and refresh yourself

• Enjoy wonderful Health and Wellbeing initiatives that support you

• Work with supportive and inclusive managers

• Flexible working arrangements

At AIA Australia, we’re proud to help guide, support and protect the wellbeing of over 3.5 million Australians. As part of the AIA Group - the largest independent publicly listed pan-Asian life insurance group – it is our ambition to engage one billion people to live Healthier, Longer, Better Lives by 2030.  Lots of companies like to say they’re different. What makes us truly different at AIA, is the difference we make in people’s lives. We are proud that this difference has been recognised in the 2024 ANZIIF awards by being named Life Insurance Company of the Year.

AIA is different. Are you?

If you want to be part of team within an organisation that offers flexibility, purpose, and the chance to make a difference every day, apply via the link prior to Friday, 20 February 2026.