Technology Risk Consultant – 2nd Line of Defence

About the role

We are looking for an experienced Technology Risk Consultant to join AIA’s Enterprise Risk Management Department. The role will help build and operate a robust 2nd Line of Defence (2LOD) technology risk function, providing oversight, guidance and analytics across the organisation.

Key responsibilities

• Provide risk, control and compliance advice to technology stakeholders at all levels.
• Support the implementation of Group/AIA technology risk and AI risk frameworks and policies.
• Facilitate risk profiling, identification and assessment of risks and controls, and maintain up‑to‑date risk profiles.
• Assist technology teams in designing, assessing and measuring a control environment that meets regulatory and internal requirements.
• Guide incident root‑cause analysis and address control breakdowns for technology‑related incidents.
• Implement risk and control data analytics, define and build Key Risk Indicator (KRI) reporting.
• Prepare regular risk and security reports for the Board and senior management.
• Provide risk advice on major technology and business initiatives to ensure security requirements are met.
• Deliver training and awareness sessions to strengthen technology risk culture.
• Assist with IT regulatory inspections and internal/external audits.

Required profile

• 8+ years of technology risk management experience, preferably in insurance or financial services.
• Bachelor’s or Master’s degree in Information Technology, Risk Management or a related discipline.
• Exceptional communication skills and a proactive, can‑do attitude.
• Ability to work collaboratively with senior stakeholders across technology, information security and risk functions.

Required skills

• Risk assessment
• Incident root cause analysis
• KRI reporting
• Risk data analytics