• Communicate with the respective IDP Owner & IDP Coordinator, by requesting, tracking, and evaluating evidence and setting up and conducting the Sample Testing Interview
• Regularly re-assess the information risks and perform risk reporting and fit gap analysis for IDPs
• Support the business owners with cloud risk assessments and 3rd party risk assessments for the business applications in scope
• Support business owners and Entity Stakeholders with prioritization of IDPs (Individual Data Processing), Scoping Domain Assessments and the entire Integrated Information Risk Management (IIRM) lifecycle
• Offer support in collecting control assurance documentation from various stakeholders
• Work with clients during the security assurance process by advising during working sessions, review and validation of documentation and evidences provided
• Prepare documentation and conduct progress reporting and tracking within the Allianz Services team and with clients
• Contribute to the preparation of working papers, presentations, reports and other correspondences to meet stakeholders’ expectations

• Degree in Information Technology/Information Systems/Computer Science or any other steams such as Cyber Security/Software Engineering. Candidates with no educational background in IT can also be considered on a case to case basis, if their working experience is relevant to Allianz Services’ requirements.
• At least 2 years of relevant IT/IT Security work experience such as IT service management, system administration, security monitoring, identity and access management, IT audit/governance/risk management among others, would be much appreciated
• Solid understanding of information security standards and frameworks such as ISO 27k suite (27001, 27002 etc), COBIT or NIST CSF and ability to apply them in a working context
• Desire to pursue or take on the ISO 27001 Lead Auditor/Lead Implementor certification
• Basic understanding of related topics such as business continuity and data privacy would be appreciated
• Have a keen interest in learning and developing cyber security skillsets such as identity and access management, social engineering and any other emerging cyber security stream.

• Previous exposure to information risk management, Information Technology Governance, IT operations (system administration, IT support) or any Information Security work streams such as offensive (ethical hacking, social engineering) and defensive security (digital forensics, security monitoring). Either by previous work experience or studies.
• Previous exposure to information security management systems and relevant industry standards, in particular the ISO27k suite and COBIT framework would be a plus
• Excellent communication skills and customer-centric working style
• Insurance and/or financial services business experience or knowledge would be a plus
• Ability to work seamlessly within a virtual team setup