Are you ready to shape a better tomorrow? AIA Digital+ is a Technology, Digital and Analytics innovation hub dedicated to powering AIA to be more efficient, connected and innovative as it fulfils its Purpose to help millions of people across Asia-Pacific live Healthier, Longer, Better Lives. If you are hungry and driven to play an active role in shaping a better tomorrow, we want to hear from you. Because the work we do at AIA Digital+ makes a difference in the lives of millions of people, every day. We will equip you with the critical skills, tools and technology, and endless opportunities to learn, contribute and thrive in a dynamic and exciting environment. If you want to shape a brighter future at AIA Digital+, please read on. About the Role We are seeking a Security & Cloud Architect with strong hands‑on experience in designing and reviewing secure, cloud‑native solutions across interconnected applications, platforms, and infrastructure. The role provides security architecture leadership and advisory support covering application security, identity and access management, data protection, cryptographic controls, compliance, and the secure adoption of emerging technologies such as Generative AI (GenAI) and Large Language Models (LLMs). This position partners closely with architecture, engineering, and delivery teams to perform security design reviews, architecture assessments, and risk‑based advisory for strategic digital initiatives—ensuring solutions enable business growth while maintaining a strong security and regulatory posture. Key Responsibilities Secure Solution Design & Technical Direction Lead security‑focused design of cloud solutions across application, integration, data, and infrastructure layers (Azure‑centric). Shape and evolve reference architectures and secure design patterns aligned to enterprise and Group standards. Produce and maintain key architecture deliverables (e.g. SAD, HLD) with clear security considerations and design decisions. Cloud Application Security & Identity Design and review authentication and authorization models for cloud applications, ensuring strong access control, token handling, session management, cryptography, and data protection. Assess security implications of new or changed applications, tools, and platforms, including impact to existing architectures. Embed secure‑by‑design principles across APIs, integrations, and middleware components. Emerging Technology & GenAI Security Provide security architecture input and assessment for solutions leveraging GenAI, LLMs, and machine‑learning technologies. Identify and address GenAI‑specific risks such as prompt injection, insecure outputs, model abuse, data poisoning, and sensitive data exposure. Apply OWASP Top 10 for LLM Applications and/or OWASP Top 10 for Machine Learning Security Risks when conducting design reviews and security assessments. Establish guardrails for LLM usage, including validation, access restriction, monitoring, data boundaries, and human‑oversight controls. Support responsible and compliant GenAI adoption aligned with enterprise risk, privacy, and regulatory expectations. Security Architecture Execution & Improvement Implement and continuously enhance cloud security architecture and controls. Drive automation of security checks and controls across delivery pipelines and operational processes. Monitor evolving threats, vulnerabilities, and industry practices to improve the organisation’s security posture. Risk, Compliance & Architecture Assurance Perform threat modelling, risk assessments, and security impact analysis for new and existing solutions. Contribute to Architecture Review Board (ARB) discussions and provide architectural assurance against standards, policies, and roadmaps. Ensure compliance with internal IT policies, regulatory requirements, and industry standards (e.g. NIST, PCI DSS). Support Local Information Security (LIS) activities related to audits, compliance reviews, and control validation. Delivery Partnership & Advisory Work closely with enterprise architects, developers, DevOps teams, and vendors throughout delivery lifecycles. Provide practical guidance to resolve security design and implementation challenges. Communicate security risks and trade‑offs clearly to technical and business stakeholders, including senior leadership. Capability Building & Enablement Act as the security architecture subject matter expert across cloud, application, and GenAI‑enabled solutions. Mentor junior team members and promote secure design awareness across IT and business teams. Facilitate balanced discussions where business needs, innovation, and security standards intersect. Minimum Requirements Education Bachelor’s degree in Computer Science, Information Security, Software/Computer Engineering, Enterprise/Solution Architecture, or related discipline. Experience 8+ years in solution and/or security architecture roles (10–15 years preferred for senior profiles). 5+ years hands‑on experience in cloud and application security architecture (IaaS / PaaS / SaaS). Experience delivering secure digital solutions within financial services or insurance environments (preferred). Exposure to API‑based architectures, microservices, event‑driven integration, and DevSecOps practices. Security & Technology Expertise Strong understanding of security frameworks such as ISO/IEC 27001, NIST, and COBIT; familiarity with PDPA, GDPR, and PCI DSS where applicable. Deep knowledge of identity and access management, data protection, cryptographic controls, and cloud security (Azure preferred). Working knowledge of CI/CD pipelines, infrastructure‑as‑code, and operational security guardrails. Awareness or hands‑on experience securing GenAI / LLM‑enabled applications, including prompt safety and data governance. Familiarity with OWASP Top 10 for LLM Applications and/or OWASP Top 10 for Machine Learning Security Risks. Professional Attributes Strong communication skills with the ability to translate complex security topics into business‑relevant language. Analytical, pragmatic, and decisive with a collaborative mindset and strong ownership. Certifications (Preferred) Security / Cloud: CISSP, CCSP, CISM, SABSA, Azure Solutions Architect, Azure DevOps. Architecture / Governance (nice to have): TOGAF, IASA. GenAI / AI security‑related training or experience (must). Build a career with us as we help our customers and the community live healthier, longer, better lives. You must provide all requested information, including Personal Data, to be considered for this career opportunity. Failure to provide such information may influence the processing and outcome of your application. You are responsible for ensuring that the information you submit is accurate and up-to-date. AIA Digital+ is central to AIA’s goal of being a customer centric and world-class digital insurer, delivering world class services for our customers, partners and employees wherever they are. We believe in finding new ways every day to shape a better tomorrow. To enhance our business, we turn this belief into action through innovation and progressive solutions that are efficient, scalable and agile. We are much more than just a technology company. At AIA Digital+, the work we do makes a real difference in the lives of millions of people, every day. We empower every one of our people to have a voice and drive innovation that creates value for our customers, partners and employees. Reimagine a brighter future at AIA Digital+. View our AIA Digital+ LinkedIn page AIA Digital+ is part of AIA Group Limited At AIA we’ve started an exciting movement to create a healthier, more sustainable future for everyone. It's about finding new ways to not only better people's lives, but to better the communities and environments we live in. As the largest listed company on the Hong Kong Stock Exchange, we’ve been proudly making a difference for people and communities across Asia for over a century. And we build on this every day with our ambition to engage one billion people to live Healthier, Longer, Better Lives by 2030. If you work at AIA, you play an important part in this movement. Which is why we give you every opportunity to learn, grow and shape your career - your way. Inspiring and supporting you to thrive - not just at work, but in life. Believe in better with AIA. View our AIA LinkedIn page Bring your difference to AIA

Assistant Manager, Technology Centre.

more at Aia.

Manager, Cloud Services

Senior Manager, Information Security

Intern , Cloud Application Transformation

similar roles.

Youth Sports and Recreation Specialist

Youth Camp Operator

Vendedor/a de Tienda - Orense (1/2 jornada) || nueva tienda

Vendedor/a de Tienda - Mr. Blue Zamora (1/2 jornada)