Senior Director, Head of IT Security

About FWD Group

FWD Group (1828.HK) is a pan-Asian life and health insurance business that serves approximately 40 million customers across 10 markets, including BRI Life in Indonesia. FWD’s customer-led and tech-enabled approach aims to deliver innovative propositions, easy-to-understand products and a simpler insurance experience. Established in 2013, the company operates in some of the fastest-growing insurance markets in the world with a vision of changing the way people feel about insurance. FWD Group is listed on the main board of the Hong Kong Stock Exchange under the stock code 1828.

For more information, please visit www.fwd.com

About FWD Life Philippines

FWD Life Insurance Corporation (FWD Life Philippines) launched its commercial operations in September 2014. As of end-2022, FWD Life Philippines ranks 3rd and 6th in terms of Paid-up Capital(1) and New Business Annual Premium Equivalent(2), respectively.

For more information, please visit fwd.com.ph .

1 www.insurance.gov.ph > Statistics > Life > 2022 > Based on Paid-Up Capital

2 www.insurance.gov.ph > Statistics > Life > 2022 > Based on New Business Annual Premium Equivalent

The Head of IT Security and Technology Governance serves as the primary information security leader for the business unit, with a dotted-line reporting relationship to the Group Chief Information Security Officer (CISO). The role is responsible for driving the local IT Security function, leading technology governance initiatives, ensuring compliance with security policies and standards, and strengthening the organization's overall security posture.

Partners closely with local IT teams, Group IT Security, shared service teams, vendors, and business stakeholders to implement security programs, manage risks, and ensure that security requirements are embedded across all technology initiatives. 1. Information Security Leadership (25%)

• Lead and oversee Business Unit IT Security activities with the support of local IT, IT Security teams, and Group IT Security.
• Act as the primary Business Information Security Officer (BISO) for the organization.
• Provide security leadership, guidance, and governance across all business and technology functions.
• Collaborate with internal and external stakeholders to ensure alignment with enterprise security objectives

1. Security Program Management (15%)

• Define, implement, and maintain the local Business Unit IT Security Program.
• Drive continuous improvement initiatives to enhance the organization's security posture.
• Establish security objectives, policies, procedures, and standards aligned with global requirements.
• Monitor security program effectiveness and recommend enhancements as needed.

1. Security Initiatives and Governance (30%)

• Lead the design, implementation, and continuous improvement of local IT Security initiatives and projects.
• Evaluate and recommend security solutions, controls, and architectures to address business needs.
• Define security operational frameworks and governance structures.
• Coordinate the rollout and adoption of Group IT Security initiatives within the country.
• Ensure security requirements are integrated into IT projects and system development lifecycles through a "security by design" approach.

1. Security Metrics and Risk Management (5%)

• Develop and monitor IT Security metrics, dashboards, and risk assessments.
• Perform risk mapping and track remediation activities for identified security gaps and deficiencies.
• Manage security exceptions, deviations, and associated remediation plans.
• Support risk-based decision-making through regular reporting and analysis.

1. Security Awareness and Stakeholder Engagement (5%)

• Promote security awareness across business and IT teams.
• Educate stakeholders on information security solutions, processes, policies, and emerging risks.
• Support the development of a strong security culture throughout the organization.

1. Executive Reporting and Governance (10%)

• Partner with senior technology and security leaders, including the CIO/CTO and Group CISO.
• Provide regular updates on security program performance, compliance status, risks, and remediation activities.
• Support management and governance forums through timely reporting and recommendations.

1. Technology Governance Leadership (10%)

• Lead the Technology Governance function in developing and enhancing technology procedures, guidelines, standards, and metrics.
• Ensure compliance with enterprise policies, regulatory requirements, and industry best practices.

-