APAC GRC Manager

APAC GRC Manager - Chubb External Careers

• Review global policies and standards with APAC Technology stakeholders
• Collate and prepare reports to Chubb senior management
• Drive the execution of Technology Risk Management framework
• Prepare and develop technology risk insights
• Improve existing technology processes, risks and control taxonomies
• Engage and collaborate with technology stakeholders
• Maintain and improve the issue register
• Facilitate and manage stakeholder self-assessment initiatives
• Facilitate the development and implementation of the Risk Appetite and Tolerance framework
• Establish and monitor Key Risk Indicators (KRIs)
• Gather and consolidate gaps identified
• Perform thematic review or risk assessment of areas requested by management
• Manage regional internal and external reviews/audits
• Monitor and validate the closure of management actions
• Approve major system enhancements from a risk and compliance perspective
• Act as the ambassador of risk culture

• CISA, CISSP, CISM, or CRISC certification
• Degree in Computer Science, Information Systems, and Engineering or equivalent work experience
• Risk Management, Compliance, or IT Audit experience
• Minimum 8 years of Technology Risk Management experience in a large organization
• Strong relationship building with all layers of the organization
• Ability to influence and affect change with commercial acumen
• Knowledge of regulatory compliance requirements across the region
• Knowledge of international standards such as PCI, SOX, ISO27001, OWASP, and NIST
• Experience in leading programs for proactively identifying risk exposure and potential non-compliant areas
• Strong verbal and written communication and presentation skills
• Collaborative with ability to influence without authority
• Sense of urgency and high degree of initiative and professional judgment
• Strong Excel and PowerPoint skills
• Eager to learn new and varied systems
• Service-focused, analytical, and detail-oriented

• 401k matching
• Health insurance
• Flight privileges
• IT audit findings
• Remediation plans
• IT risk posture
• Risk Appetite and Tolerance framework
• Key Risk Indicators (KRIs)

Chubb Asia Pacific Pte. Ltd.