Chubb Life: Senior Manager - IT Security & Governance

About the Company

Chubb Life Thailand operates the company’s life insurance business in the Thailand market as part of Chubb’s APAC portfolio. The team is building a dynamic tech organization to create seamless connections between customers, agents, and partners across the insurance product lifecycle, with a flat structure that values innovation, technical expertise, attention to detail, and personal initiative.

Responsibilities

• Design and implement a cybersecurity strategy that aligns with the organization's business objectives.
• Conduct regular security risk assessments, vulnerability assessments, and penetration testing; develop and implement security risk mitigation strategies and programs.
• Lead and coordinate response efforts for security incidents, overseeing investigation, mitigation, and post-incident analysis.
• Ensure adherence to relevant laws, regulations, and standards (e.g., PDPA) and collaborate with legal and data protection teams on policies for sensitive and personal data.
• Implement and lead initiatives for security and compliance audit certifications, including ISO 27001, NIST, C-RAF, and other applicable standards and best practices.
• Recommend, implement, and manage continuous monitoring of IT security systems and tools.
• Establish and maintain an IT governance framework, policies, and processes that align with business goals and compliance requirements.
• Work with management, legal, finance, and external auditors to promote transparency and alignment in governance practices and present reports on IT governance performance, compliance status, and risk landscape to stakeholders.
• Develop and implement data governance policies to ensure data quality, security, and compliance; manage data lifecycle and oversee data stewardship.
• Lead and mentor a small team of IT governance, compliance, and security professionals; foster a culture of continuous improvement and knowledge sharing.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum 5 years of experience in IT governance, cybersecurity, and compliance, with at least 2 years in a managerial role.
• Strong understanding of IT governance frameworks (e.g., ITIL, COBIT), cybersecurity standards (e.g., ISO 27001, NIST), and regulatory requirements (e.g., PDPA).
• Possession of IT governance and cybersecurity certifications (e.g., CISSP, CISM) is advantageous.
• Proficient in common technical team/project management tools (e.g., JIRA, Asana, Github).
• Working-level fluency in English and Thai (English equivalent to IELTS 5.5, CEFR B2, or TOEFL 72); excellent spoken and written communication for collaboration with a global management team.
• Familiarity with local regulatory bodies (e.g., OIC, SEC, BOT) is a plus.
• Experience in the insurance industry is an added advantage.

Skills

• Cybersecurity strategy, risk assessment, vulnerability management, and penetration testing.
• Security incident response and post-incident analysis.
• IT governance, policy development, and compliance audit preparation (ISO 27001, NIST, C-RAF).
• Data governance, data lifecycle management, and data protection collaboration with legal/compliance teams.
• Reporting on governance and risk to stakeholders and working with auditors.
• Team leadership, mentoring, and cross-functional collaboration.