Information Security Officer_2758

ph3Information Security Officer_2758 /h3pAzienda : Allianz /ppTipo Lavoro : Full Time /ppItaly /ph3Job Purpose/Role /h3pThe Information Security Officer (ISO) Malaysia is a key role within the Allianz Technology’s global IS organization. The ISO is accountable for the information security of the environment supporting the Allianz businesses in Malaysia, including oversight of related ISMS activities, risk identification, assessment, prevention, and remediation. The ISO (Malaysia) provides advice to regional management as well as to the local Allianz Technology Malaysia Functions with respect to Information Security risk areas, included services provided by third parties. In his/her function, the ISO will be instrumental in building up and integrating IS assurance capabilities and have a direct functional reporting line to the Allianz Technology Malaysia Heat of IT as well as the APAC Regional ISO. /ph3Key Responsibilities /h3ulliOversee the Information Security function in Malaysia and liaise with regional and central Information Security Teams. /liliOversee the implementation of and compliance with Group-wide standards, regulatory requirements and industry security standards in all Allianz Technology services and in projects. /liliLead local Information Security Steering Boards and support preparation of Information Security action plans. /liliSupport regional and local executive body in their regulatory Information Security-related governance requirements and their responsibility to set up sound organizational and operational structures and procedures. /liliSupport the implementation of Group-wide IS framework, regulatory requirements and industry security standards in all Allianz Technology services and in projects; oversee the compliance reporting process for local entities; assess and address deviations from security policies and contractual security provisions, as well as developing effective strategies to mitigate identified information security risks. /liliServe as central contact person for information security-related matters in Malaysia, including interfaces to business, partners, customers and other safeguarding functions. /liliProvide information security consulting and liaison with all relevant stakeholders. /liliEnsure the effective implementation of Information Security principles and procedures during the full-service life cycle of services offered by Allianz Technology, including those provided by external parties and outsourcing partners. /liliSystematically assess the effectiveness of security controls in all services provided by Allianz Technology, its partners and third-party providers. /liliSecurity Risk Management, including supporting the life cycle of security risk assessments, assessing and addressing deviations from security policies and contractual security provisions, as well as developing effective strategies to mitigate identified information security risks. /liliRegularly exchange with and contribute to the regional and global Allianz Technology ISO community. /liliPromote knowledge and awareness of Allianz Technology security requirements and processes. /liliContribute to defining contractual security provisions in the context of third-party management. /liliSupport the annual compliance reporting process for the local entity. /liliSupport local management in their regulatory Information Security-related governance requirements. /li /ulh3Key Requirements/Skills/Experience /h3ulliUniversity degree in computer science, natural sciences etc. or equivalent professional experience. /liliLong track record of experience in IT, 5 years+ experience in Information Security related fields and/and or risk management. /liliSound knowledge of IT security technology, architecture and processes and profound knowledge of information security management systems and relevant industry standards and control frameworks (in particular ISO270xx, COBIT2019); local regulatory standards /liliProfessional experience with supplier management (including Cloud providers), IT outsourcing and relevant control frameworks; track record in defining and monitoring contractual information security provisions. /liliProven track record in people management and/or project management in complex enterprise environments. /liliDesirable certifications: CISM/ CISSP; ISO27001 Lead Implementer/Auditor /li /ulpAllianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us. /ppAt Allianz, we stand for unity: we believe that a united world is a more prosperous world, and we are dedicated to consistently advocating for equal opportunities for all. And the foundation for this is our inclusive workplace, where people and performance both matter, and nurtures a culture grounded in integrity, fairness, inclusion and trust. /ppWe therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations. /pbGreat to have you on board. Let's care for tomorrow. /bpNote: Having different strengths, experiences, perspectives and approaches is an integral part of Allianz‘s company culture. One means to achieve this is a regular rotation of Allianz Executive employees across functions, Allianz entities and geographies. Therefore, the company expects from its employees a general openness and a high motivation to regularly change positions and collect experiences across Allianz Group. /p /p #J-18808-Ljbffr