Description

As Security Architecture you will ensures that the design, operation, and governance of technology and business architectures align with regulatory requirements and the evolving threat landscape. You will ensures that security is embedded end-to-end across systems, processes, and third-party interactions by defining standards, conducting architecture reviews, and supporting stakeholders in building secure solutions based on best practices.

This role also drives the continuous development of the security architecture capability, translates risk and threat intelligence into actionable design decisions, and acts as a key interface between business, IT, and security teams. It enables informed, risk-based decision-making while managing complexity and ensuring alignment with enterprise architecture.

What you will do

1. Security Controls & Frameworks

• Contribute to the continuous development and improvement of AllianzGI’s global information security programme, including policies, standards, frameworks, processes, and toolsets.
• Ensure that information security best practices are consistently applied across regions, entities, and technology domains, including traditional IT and emerging technologies.

1. Security Architecture Reviews & Risk Assessment

• Conduct security architecture and governance reviews for systems, applications, and initiatives based on industry best practices and regulatory expectations.
• Review solutions leveraging cloud-native services, advanced analytics, or AI-enabled components, with a focus on secure architecture, data protection, and control design.
• Opportunities to broaden expertise across security governance, architecture, risk management, and emerging technology use cases.

1. Threat Modelling & Control Design

• Perform threat modelling for systems and applications in scope as a structured means of identifying and communicating security risks.
• Apply internationally recognised threat modelling and risk assessment frameworks.
• Contribute to the design and refinement of preventive and detective security controls, including those addressing data-driven and automated decision systems, where relevant.

1. Oversight, Reporting & Governance Forums

• Prepare, moderate, and actively contribute to information security governance forums, steering committees, and status meetings.
• Provide clear and structured reporting on information security risks, control effectiveness, and key issues to senior management and governance bodies.
• Support decision-making by balancing regulatory expectations, risk perspectives, and business priorities.

1. Audit, Assurance & Regional Oversight

• Act as a regional information security point of contact for internal and external auditors, risk management, and business partners.
• Support audit activities, examinations, and reviews, including those covering complex or innovative technology use cases.
• Take the lead in oversight activities across other regional AllianzGI entities and support the harmonisation of information security governance practices.

1. Awareness, Enablement & Collaboration

• Support and contribute to global security awareness, training, and communication initiatives.
• Provide input on awareness topics related to the secure and responsible use of new technologies, including AI-supported systems, where applicable.
• Work closely with a distributed team of Information Security, IAM, and Cybersecurity professionals across Asia and Europe to ensure effective collaboration and consistent outcomes.