Senior Director, Head of IT Security

About FWD Group

FWD Group (1828.HK) is a pan-Asian life and health insurance business that serves approximately 40 million customers across 10 markets, including BRI Life in Indonesia. FWD’s customer-led and tech-enabled approach aims to deliver innovative propositions, easy-to-understand products and a simpler insurance experience. Established in 2013, the company operates in some of the fastest-growing insurance markets in the world with a vision of changing the way people feel about insurance. FWD Group is listed on the main board of the Hong Kong Stock Exchange under the stock code 1828.

For more information, please visit www.fwd.com

About FWD Life Philippines 

FWD Life Insurance Corporation (FWD Life Philippines) launched its commercial operations in September 2014. As of end-2022, FWD Life Philippines ranks 3rd and 6th in terms of Paid-up Capital(1) and New Business Annual Premium Equivalent(2), respectively.

For more information, please visit fwd.com.ph. 

1 www.insurance.gov.ph > Statistics > Life > 2022 > Based on Paid-Up Capital

2 www.insurance.gov.ph > Statistics > Life > 2022 > Based on New Business Annual Premium Equivalent

The Head of IT Security and Technology Governance serves as the primary information security leader for the business unit, with a dotted-line reporting relationship to the Group Chief Information Security Officer (CISO). The role is responsible for driving the local IT Security function, leading technology governance initiatives, ensuring compliance with security policies and standards, and strengthening the organization's overall security posture.

Partners closely with local IT teams, Group IT Security, shared service teams, vendors, and business stakeholders to implement security programs, manage risks, and ensure that security requirements are embedded across all technology initiatives.

1. Information Security Leadership (25%)

• Lead and oversee Business Unit IT Security activities with the support of local IT, IT Security teams, and Group IT Security.
• Act as the primary Business Information Security Officer (BISO) for the organization.
• Provide security leadership, guidance, and governance across all business and technology functions.
• Collaborate with internal and external stakeholders to ensure alignment with enterprise security objectives

2. Security Program Management (15%)

• Define, implement, and maintain the local Business Unit IT Security Program.
• Drive continuous improvement initiatives to enhance the organization's security posture.
• Establish security objectives, policies, procedures, and standards aligned with global requirements.
• Monitor security program effectiveness and recommend enhancements as needed.

3. Security Initiatives and Governance (30%)

• Lead the design, implementation, and continuous improvement of local IT Security initiatives and projects.
• Evaluate and recommend security solutions, controls, and architectures to address business needs.
• Define security operational frameworks and governance structures.
• Coordinate the rollout and adoption of Group IT Security initiatives within the country.
• Ensure security requirements are integrated into IT projects and system development lifecycles through a "security by design" approach.

4. Security Metrics and Risk Management (5%)

• Develop and monitor IT Security metrics, dashboards, and risk assessments.
• Perform risk mapping and track remediation activities for identified security gaps and deficiencies.
• Manage security exceptions, deviations, and associated remediation plans.
• Support risk-based decision-making through regular reporting and analysis.

5. Security Awareness and Stakeholder Engagement (5%)

• Promote security awareness across business and IT teams.
• Educate stakeholders on information security solutions, processes, policies, and emerging risks.
• Support the development of a strong security culture throughout the organization.

6. Executive Reporting and Governance (10%)

• Partner with senior technology and security leaders, including the CIO/CTO and Group CISO.
• Provide regular updates on security program performance, compliance status, risks, and remediation activities.
• Support management and governance forums through timely reporting and recommendations.

7. Technology Governance Leadership (10%)

• Lead the Technology Governance function in developing and enhancing technology procedures, guidelines, standards, and metrics.
• Ensure compliance with enterprise policies, regulatory requirements, and industry best practices.
• Drive continuous governance improvements to support organizational objectives.

Privacy Notice

Your privacy is a priority for FWD.  The Company keeps your personal information with us in confidence. To know more about how we process your information, kindly refer to our FWD Recruitment Privacy Notice.

FWD has partnered with Talocity Instasolutions Private Limited (“Talocity”) to manage the initial filtering of candidate’s profiles through video interviews, social profile mapping, and video analytics using artificial intelligence engine that is offered within the Talocity platform.  The platform evaluates the candidate on the five well-known dimensions as per OCEAN Personality Model that influence occupational success and help understand workplace behavior. For more information, please refer to Talocity Privacy Policy.

When you apply, FWD will share your name, phone number and email address to Talocity to contact you and conduct the initial screening and profiling process.  Shortlisted candidates will then be contacted by FWD for the face-to-face interview.