Regional Information Security Officer - APAC (Bangkok-based)

Allianz Partners — a world leader in B2B2C insurance and assistance, present in 75 countries with over 21,100 employees — is seeking a senior Regional Information Security Officer (RISO) to lead information security governance across APAC, covering India, Thailand, Malaysia, Singapore, Japan, the Philippines, and Hong Kong. Based in Bangkok in a hybrid work model, you will report directly to the Global CISO and serve as the single point of contact for the CISO function across the entire region. This is a full-time, senior individual contributor role — not a local security position. You will operate with a high degree of autonomy, building trusted relationships with senior business leaders up to MD level, translating complex security challenges into business decisions, and ensuring the region's security posture keeps pace with a fast-evolving global landscape. If you are a seasoned security professional who leads through influence, communicates with authority at the executive table, and thrives in a complex, multi-country environment, this role is for you.

What You'll Do

Strategy & Governance

• Serve as the regional single point of contact for the Global CISO function across India, Thailand, Malaysia, Singapore, Japan, the Philippines, and Hong Kong
• Support the Global CISO and central Information Security team in developing and communicating the IS strategy for Allianz Partners, applying relevant standards and frameworks as required by Allianz Group Security
• Ensure compliance with the Group Information Security Framework (GISF) across the region, reporting any non-compliance through the central ISO team
• Champion and coordinate group-wide security initiatives within APAC, driving the security roadmap and ensuring regional milestones and deadlines are met
• Provide regional security metrics to the central team for consolidated reporting across the Allianz Partners group
• Support PCI compliance requirements where applicable, coordinating with local PCI accountable owners and central PCI specialists

Risk Management

• Oversee the practical implementation of Information Security Risk Assessments, Cloud Risk Assessments, and Third Party Security Assessments across the region, coordinating with third-party technical providers and the central ISO team
• Manage risk frameworks and recommend process improvements based on regional experience
• Monitor and escalate emerging security risks across the APAC regulatory and threat landscape, drawing on your understanding of the financial services environment in each market

Project Portfolio Management

• Act as the regional champion for group-wide and Allianz SE security initiatives, coordinating delivery across diverse APAC stakeholders
• Partner closely with Organisational Management to ensure business change programmes have appropriate security oversight and remain within risk appetite

Awareness & Training

• Lead the design and delivery of security awareness and training activities tailored to the cultures and contexts of your APAC markets, ensuring a consistent global message delivered in locally relevant ways
• Collaborate with the central team on the security awareness roadmap, shaping materials that resonate with stakeholders across multiple countries and languages

Operational Security

• Coordinate first-line operational security activities across the region, working with third-party technical providers to maintain security posture, manage incidents, and ensure response processes are followed
• Oversee penetration testing programmes and vulnerability patch remediation through third-party providers, reporting outcomes to the central team
• Apply AI-powered governance and reporting tools to track security metrics, manage risk dashboards, and support regional reporting

What You'll Bring

• A senior professional profile — you bring the gravitas, experience, and independence to represent the CISO function across a multi-country region without close supervision
• 6–10 years of significant professional experience in information security, with a clear emphasis on governance, risk, compliance, and business engagement — rather than hands-on technical or infrastructure delivery
• Proven ability to engage, influence, and advise senior stakeholders up to MD and C-level across multiple countries and cultures, translating complex security topics into clear business language and actionable decisions
• Deep enough technical knowledge of security domains — including risk management, network and application security, vulnerability management, and penetration testing — to credibly oversee third-party providers, challenge technical findings, and represent the CISO function with authority
• Demonstrated experience operating at a regional or multi-country level, ideally across APAC markets; candidates with experience working across international or cross-border environments are strongly encouraged to apply
• Experience working within global, matrixed organisations and navigating cross-cultural environments across diverse markets
• Familiarity with APAC financial services regulatory frameworks sufficient to engage regulators and senior stakeholders on compliance matters
• Experience managing or overseeing third-party security service providers
• Familiarity with AI-assisted governance tools, automated risk reporting, or AI-driven compliance platforms is an advantage
• Professional certifications such as CISSP, CISM, CRISC, or equivalent are highly desirable
• Fluency in English is required; proficiency in one or more APAC regional languages is an advantage

What We Offer

• Hybrid working model — flexibility to balance office collaboration with remote working, based in Bangkok
• International career development — access to global mobility opportunities and targeted development programmes across the Allianz Group
• A genuinely global environment — collaborate with colleagues across 75 countries, speaking 70 languages, on challenges that span borders and cultures
• Learning & development — a wide variety of courses and programmes to support your continued professional growth
• Work Well programmes — designed to support your health, wellbeing, and work-life balance
• Relocation support — Allianz Partners welcomes applications from candidates based outside Thailand; relocation assistance may be available for the right candidate
• An inclusive culture where your whole self is welcome, regardless of background, nationality, or belief

Who We Are

Allianz Partners is a world leader in B2B2C insurance and assistance, offering global solutions that span international health and life, travel insurance, automotive and assistance. Present in 75 countries, our 21,100 employees speak 70 languages, handle over 71 million cases each year, and are motivated to go the extra mile to offer peace of mind to our customers around the world. Our products are available through four commercial brands: Allianz Assistance, Allianz Automotive, Allianz Travel and Allianz Care. Customer-driven and innovation-focused, we are redefining insurance services by delivering future-ready, high-tech, high-touch products and solutions that go beyond traditional insurance.

Entity: Allianz Partners Thailand (AWP Services Thailand)
Location: Petchaburi 35, Ratchathewi, Bangkok
Reporting Line: Reports directly to the Global CISO
Position Type: Individual Contributor (IC)

99707 | IT & Tech Engineering | Professional | Allianz Partners | Full-Time | Permanent

Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges is what makes us a unique employer. We are united by a shared commitment: to put our customers first and at the centre of everything we do. Their needs inspire our thinking and guide our actions. Together, we can build an environment where everyone feels empowered and confident to explore, grow and shape a better future – for our customers and for the world around us. At Allianz, we stand for unity: we believe that a united world is a more prosperous world, and we are dedicated to consistently advocating for equal opportunities for all. The foundation for this is our inclusive workplace, where people and performance both matter, and where integrity, fairness, inclusion and trust are at the heart of our culture. We therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations. Join us. Let's care for tomorrow.

To Recruitment Agencies

We have an in-house recruitment team that focuses on sourcing great candidates directly. Therefore, we do not accept unsolicited resumes from agencies or search firm recruiters. When we do work with recruitment agencies, that engagement is formalized by a contract. Fees will only be paid when such a contract is in place. Without a contract, we will not accept invoices related to unsolicited resumes, even if the candidate is ultimately hired. Please do not contact hiring managers directly.