Regional Director of Technology, Cyber & Change Audit

At AIA we’ve started an exciting movement to create a healthier, more sustainable future for everyone.

It’s about finding new ways to not only better people's lives, but to better the communities and environments we live in. And we build on this every day with our ambition to engage one billion people to live Healthier, Longer, Better Lives by 2030.

And to get there, we need leaders with the courage, clarity and humanity to inspire, guide and support their teams to thrive every day - in the work they do and the life they live. Our leaders always have and will play a vital part in our journey to help more people live Healthier, Longer, Better Lives, build healthier societies and cultivate healthier environments that better everyone.

If you sound like that leader, read on.  

About the Role

The Regional Audit Director, Technology, Cyber & Change leads independent assurance over technology, cybersecurity, data governance, resilience and change risks across all AIA entities. The role supports the Group Head of Internal Audit in maintaining the audit universe, developing and delivering the audit plan, and reporting key risk insights to senior management, the Board Audit Committee and the Board.
As a member of the GIA Executive Committee, the role contributes to GIA’s strategy, innovation, audit capability, talent development, recruitment, fiscal discipline and role-modelling of AIA’s Operating Philosophy.

Roles and Responsibilities:

• Audit strategy and planning: Lead the design, execution and oversight of assurance activities across technology and change risks within the AIA Group audit universe, including development of audit strategies and programmes to improve audit effectiveness and efficiency.
• Audit delivery and quality: Lead geographically dispersed audit teams throughout the audit lifecycle, ensuring audits are planned, scoped and delivered in accordance with the GIA Charter, GIA Manual and applicable professional standards.
• Audit reporting and management actions: Oversee audit reporting, ensure issues are well- constructed, lead discussions with auditee management, and provide practical recommendations to strengthen controls, processes and performance. Evaluate the adequacy, timeliness and effectiveness of management responses to audit findings.
• Business knowledge and risk monitoring: Maintain a strong understanding of AIA’s business, strategy, technology environment and evolving risk profile, including technology, cyber, data and change risks; monitor emerging risks, key risk indicators, regulatory developments and significant business or technology change; and recommend audit plan updates as required.
• Risk insight and reporting: Support the Group Head of Internal Audit in providing the Board Audit Committee, Board and senior management with a holistic and independent view of the Group’s technology and change risk landscape.
• Leadership and people development: Provide direction, coaching and feedback to audit staff across locations; resolve team issues constructively; and build a high-performance culture focused on capability, accountability and talent development.
• Stakeholder engagement: Build and maintain strong relationships with senior executives across Group and Business Units, particularly in technology, digital, change and technology risk, to ensure GIA remains informed of business priorities and emerging risks.
• Audit innovation, analytics and automation: Champion innovation, new ways of working, data analytics, automation, continuous controls monitoring and other digital audit techniques to enhance audit quality, coverage, efficiency and insight.
• Integrated audit collaboration: Work with business audit teams to embed technology, cyber, data and change risk considerations into integrated audits and enterprise-wide assurance activities.
• Strategic contribution and collaboration: Support AIA and GIA strategic priorities, demonstrate ownership and accountability, and collaborate closely with peer Regional Directors, local audit heads, Risk, External Audit, regulators and co-source or specialist providers.

Minimum Job Requirements:

• Education and professional qualifications: Bachelor’s or master’s degree in accounting, computer science, management information systems or a related field. CIA, CPA, CISA, CISSP, CRISC or other relevant professional certifications are highly desirable.
• Experience: At least 15 years’ experience in technology audit, risk management and/or Big Four technology consulting in complex international environments, preferably within insurance or financial services.•
• Technology, cyber and regulatory risk knowledge: Deep and broad understanding of technology platforms, cybersecurity, data, resilience and change risks, including relevant Asian regulatory expectations for technology, cyber and information security; experience using COBIT, NIST, FAIR or other governance, security or risk management frameworks.
• Emerging technology risk: Current knowledge of emerging technology risks, including artificial intelligence, cloud, digital platforms, automation, data ethics and third-party technology dependencies, and the ability to reflect these risks in audit coverage.
• Communication and stakeholder management: Excellent written and verbal communication skills, strong boardroom presence, sound judgement and discretion, with the ability to influence and negotiate effectively, manage multiple stakeholder needs, and present audit matters to audit committees, senior management, auditee management and regulators.
• Leadership: Strong people leadership skills, with the ability to lead senior team members, set clear expectations, coach and develop talent, drive accountability, resolve issues constructively and build effective teams across locations.
• Judgement and problem solving: Excellent analytical and problem-solving skills, with the ability to make sound, risk-based decisions in complex situations.

Build a career with us as we help our customers and the community live Healthier, Longer, Better Lives.

You must provide all requested information, including Personal Data, to be considered for this career opportunity. Failure to provide such information may influence the processing and outcome of your application. You are responsible for ensuring that the information you submit is accurate and up-to-date.