アプリケーションマネージャー

AIGについて

American International Group, Inc.（AIG）は大手グローバル保険会社です。100年もの経験に基づき、現在AIGの会員企業は、80を超える国と地域のお客様を対象に、損害保険、生命保険、退職金ソリューション、その他の金融サービスを幅広く提供しています。これらの多様なサービスには、企業や個人が資産を保護し、リスクを管理し、退職後の安心を確保できる商品やサービスが含まれています。

AIGは「雇用機会均等」を保証します

「機会均等」を保証する雇用者であることは、アメリカン・インターナショナル・グループおよびその子会社や関連会社が常に守るべきポリシーです。人種、肌の色、宗教、年齢、性別、性表現、出身国、退役軍人ステータス、障がい、その他の法的に保護されたカテゴリーを問わず、すべての適格人材に平等な機会を提供します。AIGは、当社の将来とミッションにとってダイバーシティとインクルージョンが非常に重要であり、革新、成長、収益性をもたらす創造的な職場の基盤を構築するものと考えています。さまざまなプログラムや取り組みを通じて、従業員一人ひとりに投資し、従業員を個人として尊重するだけでなく、それぞれの独自の視点を真に評価するよう努めています。

事業部門について

損害保険部門は保険商品・サービスの主要なプロバイダーであり、商業保険や個人保険のお客様を対象としています。
世界トップクラスの範囲の広さを誇る、損害保険のネットワークもあります。多様なマルチチャネルの販売ネットワークを通じて、幅広い商品をお客様に提供しています。

Data Engineer:

保険を再考して世界に大きな変化をもたらす

American International Group, Inc. (AIG) は、法人向け企業保険および個人保険ソリューションの世界的リーダーです。 私たちは世界で最も広範な損害賠償ネットワークの 1 つです。 私たちに加わるのはとてもエキサイティングです。私たちはビジネス全体にわたって、これまでより優れたソリューションをお客様に提供するための新しく革新的な方法を考えています。 AIG では、個人、企業、コミュニティのサポートにさらに踏み込んで、リスクの管理、不確実な時代への対応、新たな可能性の発見を支援します。 当社は、すべての人がその人らしくなりたい姿に向けて働く文化の中で、継続的な学習と能力開発を通じて、当社の最大の資産である人材に投資します。

JOB DESCRIPTION – Technology Risk & Controls, Manager (JG 21)

JOB SUMMARY

The Technology Risk & Controls Manager is an integral part of the Technology Risk and Controls (TRC) team. The Japan TRC team is responsible for risk management that includes internal and external audits and regulatory examinations, IT Regulatory assessments, IT internal controls, governance for IT security, system development, computer operation and management reporting.

Key responsibilities will include, but are not limited to: managing IT regulatory compliance; overseeing Internal Audit reviews, issues and action plans; enhancing and reporting on Key Risk Indicators; and policy adoption and implementation. This position will work closely with other TRC members as well as management across IT, Risk, and Internal Audit.

JOB DESCRIPTION

The Technology Risk & Controls Manager will be responsible for numerous critical initiatives, including the following:

• Manage Risk Associated with the Transformation Program
  • Monitor progress of Japan’s Transformation Program, identifying risks early and working with the Japan CIO to address them
  • Communicate delays for transparency
  • Work with the CIO to confirm appropriate governance is in place for IT spending, IT changes, etc.

• Manage IT Regulatory Compliance:
  • When a new or updated regulation is identified, conduct a regulatory assessment to assess compliance with the regulation and identify gaps
  • Draft action plans to address the gaps and work with key stakeholders to establish ownership of the gaps
  • Obtain approval of the plans by senior leadership and the owners of the action plans
  • Monitor action plans, understanding where there are significant issues, and what can be done to address these issues, escalating as appropriate
  • Collaborate with Risk to understand emerging risks stemming from these regulations
  • Manage technology regulatory inquiries and requests for information for technology and cyber (coordination, data collection, status reporting)

• Oversee IT’s Internal Audit issues:
  • Partner with Internal Audit and IT functions to identify and understand all issues
  • Support and drive the drafting of the Action Plans, confirming that they address the root cause of the issues
  • Monitor Action Plans, understanding where there are significant issues, and what can be done to address these issues, escalating as appropriate

• Key Risk Indicators:
  • Extract key data points monthly
  • Use these data to create and track Key Risk Indicators each month
  • Report on these KRIs at the IT Risk Committee meeting
  • When issues arise, work with IT teams to investigate to identify the root cause and resolve them

• Adopt and Implement IT’s policies and standards
  • Provide feedback to policy and standard owners to review and refresh the existing policy suite
  • Identify gaps and drive strategic change/improvement
  • Once the policies and standards are updated and published, provide training in Japan
  • Implement the policies and standards in Japan

JOB REQUIREMENTS

Experience

• 10+ years of experience within technology risk, control, and governance, IT Internal Audit or SOX disciplines in financial industry
• Candidate must be Bilingual (Japanese and English)
• Bachelor’s degree required
• Strong expertise in SOX framework nice to have
• Experience analyzing risk throughout the development life cycle of business applications.
• Demonstrated knowledge of internal and external controls required in a regulated insurance company environment including Japanese Personal Information Protection Act.
• Ability to oversee multiple processes, action plans and key stakeholders simultaneously
• Experience raising awareness of issues to key stakeholders across technology

Core Skills

• Demonstrate robust analytical skills

• • Proven track record of drawing conclusions, making decisions, and using data to solve problems
  • Ability to define solutions from ambiguous scenarios

• Maintain excellent interpersonal and oral/written communication skills

• • Active listener
  • Ability to drive change through influence

• Excellent negotiation, collaboration, facilitation, and coordination

• • Negotiate prioritization and treatment of risk issues based on level of risk

JOB SUMMARY

テクノロジーリスク＆コントロールマネージャーは、テクノロジーリスク＆コントロール（TRC）チームの重要なメンバーです。日本のTRCチームは、内部および外部監査、規制当局による審査、IT規制評価、IT内部統制、ITセキュリティのガバナンス、システム開発、システム運用、管理報告などを含むリスク管理を担当しています。

主な職務内容は、IT規制遵守のためのガバナンス管理、内部監査レビュー・課題・アクションプランのモニタリング、主要リスク指標（KRI）の強化と報告、会社のITポリシーの適用と実施など多岐にわたります。本ポジションは、他のTRCメンバーやIT、リスク、内部監査部門のマネジメントと密接に連携して業務を遂行します。

JOB DESCRIPTION

テクノロジーリスク＆コントロールマネージャーは、以下を含む多数の重要なイニシアチブを担当します。

• トランスフォーメーションプログラムに関連するリスク管理
  • 日本のトランスフォーメーションプログラムの進捗を監視し、リスクを早期に特定し、日本CIOと連携して対応
  • 透明性確保のため遅延を報告
  • CIOと協力し、IT支出やIT変更等に関する適切なガバナンス体制の確認

• IT規制遵守の管理
  • 新規または更新された規制が特定された際、規制評価を実施し、遵守状況とギャップを特定
  • ギャップ解消のためのアクションプランを策定し、主要関係者と協力してオーナーシップを特定
  • シニアリーダーシップおよびアクションプランオーナの承認を取得
  • アクションプランの進捗を監視し、重大な課題や対応策を把握し、必要に応じてエスカレーション
  • リスク部門と連携し、規制に起因する新たなリスクを把握
  • テクノロジーおよびサイバー関連の規制当局からの照会・情報要求への対応（調整、データ収集、進捗報告）

• IT監査における課題の管理
  • 内部監査およびIT部門と連携し、全ての課題を特定
  • アクションプランの策定を支援・推進し、根本原因への対応を確認
  • アクションプランの進捗を監視し、重大な課題や対応策を把握し、必要に応じてエスカレーションを実施

• 主要リスク指標（KRI）の管理
  • 毎月、ITリスクに関する主要なデータをトラッキング・抽出し、KRIレポートを作成
  • ITリスク委員会等でKRIを報告
  • 課題発生時はITチームと連携し、根本原因の調査・解決

• ITポリシーおよびスタンダードの適用・実施
  • ITポリシー・スタンダードのオーナーにフィードバックを提供し、既存ポリシーの見直し・刷新を推進
  • ギャップを特定し、戦略的な改善を推進
  • ITポリシー・スタンダードの更新・公開後、必要に応じてトレーニングを実施
  • 日本国内でのポリシー・スタンダードの適用を実施

JOB REQUIREMENTS

経験

• 金融業界におけるテクノロジーリスク、コントロール、ガバナンス、IT監査またはSOX分野で10年以上の経験
• 日本語・英語必須
• 学士号
• SOXフレームワークの高度な知識があれば尚可
• 業務アプリケーションの開発ライフサイクル全体にわたるリスク分析経験
• 保険会社で求められる内部・外部統制（日本の個人情報保護法を含む）に関する知識
• 複数のプロセス、アクションプラン、主要関係者を同時に管理する能力
• テクノロジー部門全体の主要関係者に課題認識を促す経験

コアスキル

• 高度な分析力
  • 結論を導き意思決定を行い、データを活用して課題を解決した実績
  • 不明確な状況から解決策を定義する能力
• 優れた対人・口頭／書面コミュニケーション能力
  • 傾聴力
  • 影響力を活用したトランスフォーメーション等の推進力
• 優れた交渉力、協働力、ファシリテーション力、調整力
  • リスクレベルに応じた課題の優先順位付け・対応方法の交渉

Japan Security Engineering SME (JG21)

American International Group, Inc. (AIG) is a leading global insurance organization. AIG member companies provide a wide range of property casualty insurance in approximately 70 countries and jurisdictions. These diverse offerings include products and services that help businesses and individuals protect their assets and manage risks.

We’re also committed to making a positive difference for our colleagues and in the communities where we work and live. We encourage colleagues to give back to the causes they care most about, supporting these efforts through our Volunteer Time Off and Matching Grants Programs.

Get to know the business

At AIG, technology is at the heart of everything we do, from underwriting risks to processing claims. The Information Technology team equips our colleagues with the latest tools to complete their work efficiently and with the highest standards of excellence. The team is responsible for shielding the company’s systems from security risks, while designing technology strategies that enable AIG’s businesses to achieve their goals. AIG’s Information Technology functions include enterprise architecture, software and systems engineering, cybersecurity, and technology risk and compliance.

About the role

The Japan Security Engineering SME will support security engineering efforts related to the AIG Security Stack (Crowdstrike, Tanium, Qualys, Imperva DAM/DAS, Microsoft Purview/Defender, ProofPoint, Trend Micro, Varonis, SafeBreach, Agari DMARC, Prisma, Wiz) as Subject Matter Expert. The candidate must have extensive experience securing both enterprise-level on premise and Cloud services, including Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS) across multiple cloud providers, including AWS, Google Cloud Platform (GCP), Microsoft Azure (Azure). The candidate must also have subject matter expertise in on premise and Cloud Security Architectures, Vulnerability Management, and Network Security to help protect the firm’s cloud workloads and data deployed into different types of cloud and cloud/hybrid systems. The Japan Security Engineering SME will serve as a key technical expert for the Information Security Organization and other Information Security teams for all matters related to the AIG Security Stack across the Japan and APAC regions.

Responsibilities

• Key technical subject matter expert covering the deployment, management/maintenance, and ‘Follow the Sun’ support of the AIG security stack for on premise systems and cloud service offerings from AWS, Microsoft Azure, or Google Cloud Platform (GCP) to identify threats, risks, and controls to secure the services.

• Operate as a trusted advisor for on premise and cloud AIG Security Stack, mentoring junior team members and developers to understand threats and risk mitigation options for on premise and cloud services.

• Collaborate with other information security teams to help address critical security risks to the business. Ensure that cloud security risk related issues are appropriately monitored and addressed within the IT environment.

• Work with stakeholders to develop, maintain, and enforce cloud security policies and procedures.

• Collaborate with the security architecture team, cloud security engineering team, security remediation team, and application and infrastructure teams to protect on premise and cloud workloads and data deployed into different types of on premise, cloud, and cloud/hybrid systems.

• Support the development of security policies, standards, and procedures for on premise and cloud-based applications and infrastructure leveraging cloud security solutions.

Requirements

• Bachelor's degree or equivalent experience in Cybersecurity, Information Technology, or related field, such as Computer Science.
• Language proficiency in English at Fluent level.
• 12+ years of experience in on premise and cloud security or related roles, with hands-on experience in cloud platforms such as AWS, Azure, or Google Cloud
• 8+ years of direct, hands-on experience with on premise and Cloud Security Posture management solutions including compute agents, DevOps code scanning deployment, and posture management policy tuning, utilizing IaC automation for efficient and secure cloud operations.
• Deep and broad understanding of cloud/cloud hybrid platforms (IDaaS/IaaS/SaaS/PaaS) and associated security tools and processes.
• Proficiency in implementing robust security measures, including agent/agentless workload defenders, in cloud-native environments such as Kubernetes (AKS, EKS, GKS) and Azure Functions.
• Additional certifications such as, CISSP, CCSP, Security+, foundational/associate/security tracks for Azure, AWS, GCP are a plus.
• Recent and relevant experience in vulnerability analysis and exploitation techniques.
• Troubleshoot issues within the product when necessary, assisting different teams, crash dumps, performance monitor and release blockers.
• In depth knowledge of Critical Security Controls like NIST, CIS Benchmarks, DISA STIG standards etc.
• Familiarity with International Security standards and Industry framework like ISO 27001/27002, PCI DSS and SOX.
• In depth knowledge and expertise with Infrastructure hardening and Security settings for Windows and Linux.
• Intermediate to Expert level knowledge on Windows & Active Directory, Unix/Linux Operating Systems.
• Good scripting knowledge using PowerShell, Python, Linux shell is desired.
• Strong knowledge of Cloud computing, Virtualization concepts and PaaS/SaaS services.
• Strong knowledge of TCP/IP and HTTP protocols.
• Strong knowledge of Endpoint Security Concepts and Incident Response processes
• Experience with SIEM & tool integrations – CrowdStrike NextGen SIEM is preferred
• Strong Security Framework knowledge
• Be an energetic “self-starter” who is empowered to take ownership and be accountable for deliverables, both individually and as part of a growing team.
• Team player – able to lead, mentor, communicate, collaborate, and work effectively in a globally distributed team.

Japan Security Engineering Lead (JG21)

American International Group, Inc. (AIG) is a leading global insurance organization. AIG member companies provide a wide range of property casualty insurance in approximately 70 countries and jurisdictions. These diverse offerings include products and services that help businesses and individuals protect their assets and manage risks.

We’re also committed to making a positive difference for our colleagues and in the communities where we work and live. We encourage colleagues to give back to the causes they care most about, supporting these efforts through our Volunteer Time Off and Matching Grants Programs.

Get to know the business

At AIG, technology is at the heart of everything we do, from underwriting risks to processing claims. The Information Technology team equips our colleagues with the latest tools to complete their work efficiently and with the highest standards of excellence. The team is responsible for shielding the company’s systems from security risks, while designing technology strategies that enable AIG’s businesses to achieve their goals. AIG’s Information Technology functions include enterprise architecture, software and systems engineering, cybersecurity, and technology risk and compliance.

About the role

The Japan Security Engineering Lead will drive security engineering efforts related to the AIG Security Stack (Crowdstrike, Tanium, Qualys, Imperva DAM/DAS, Microsoft Purview/Defender, ProofPoint, Trend Micro, Varonis, SafeBreach, Agari DMARC, Prisma, Wiz). The candidate must have extensive experience securing both enterprise-level on premise and Cloud services, including Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS) across multiple cloud providers, including AWS, Google Cloud Platform (GCP), Microsoft Azure (Azure). The candidate must also have subject matter expertise in on premise and Cloud Security Architectures, Vulnerability Management and Network Defense to help protect the firm’s cloud workloads and data deployed into different types of cloud and cloud/hybrid systems. The Japan Security Engineering Lead will serve as a key technical expert for the Information Security Organization and other Information Security teams for all matters related to the AIG Security Stack across the Japan and APAC regions.

Responsibilities

• Lead the deployment, management/maintenance, and Follow the Sun support of AIG security stack for on premise infrastructure and cloud service offerings from AWS, Microsoft Azure, or Google Cloud Platform (GCP) to identify threats, risks, and controls to secure the services.

• Operate as a trusted advisor for on premise and cloud AIG Security Stack, mentoring junior team members and developers to understand threats and risk mitigation options for on premise and cloud services.

• Collaborate with other information security teams to help address critical security risks to the business. Ensure that cloud security risk related issues are appropriately monitored and addressed within the IT environment.

• Work with stakeholders to develop, maintain, and enforce cloud security policies and procedures.

• Collaborate with the security architecture team, cloud security engineering team, security remediation team, and application and infrastructure teams to protect on premise and cloud workloads and data deployed into different types of on premise, cloud and cloud/hybrid systems.

• Support the development of security policies, standards, and procedures for cloud-based applications and infrastructure leveraging cloud security solutions.

Requirements

• Bachelor's degree or equivalent experience in Cybersecurity, Information Technology, or related field, such as Computer Science.
• Language proficiency in English at Fluent level. Intermediate level Japanese (email communication and reading Japanese materials, conversations at meetings with local counterparts)
• 3+ years of experience in a supervisory lead or management role
• 12+ years of experience in on premise and cloud security or related roles, with hands-on experience in cloud platforms such as AWS, Azure, or Google Cloud
• 8+ years of direct, hands-on experience with on premise and Cloud Security Posture management solutions including compute agents, DevOps code scanning deployment, and posture management policy tuning, utilizing IaC automation for efficient and secure cloud operations.
• Deep and broad understanding of cloud/cloud hybrid platforms (IDaaS/IaaS/SaaS/PaaS) and associated security tools and processes.
• Proficiency in implementing robust security measures, including agent/agentless workload defenders, in cloud-native environments such as Kubernetes (AKS, EKS, GKS) and Azure Functions.
• Additional certifications such as, CISSP, CCSP, Security+, foundational/associate/security tracks for Azure, AWS, GCP are a plus.
• Recent and relevant experience in vulnerability analysis and exploitation techniques.
• Troubleshoot issues within the product when necessary, assisting different teams, crash dumps, performance monitor and release blockers.
• In depth knowledge of Critical Security Controls like NIST, CIS Benchmarks, DISA STIG standards etc.
• Familiarity with International Security standards and Industry framework like ISO 27001/27002, PCI DSS and SOX.
• In depth knowledge and expertise with Infrastructure hardening and Security settings for Windows and Linux.
• Intermediate to Expert level knowledge on Windows & Active Directory, Unix/Linux Operating Systems.
• Good scripting knowledge using PowerShell, Python, Linux shell is desired.
• Strong knowledge of Cloud computing, Virtualization concepts and PaaS/SaaS services.
• Strong knowledge of TCP/IP and HTTP protocols.
• Strong knowledge of Endpoint Security Concepts and Incident Response processes
• Experience with SIEM & tool integrations – CrowdStrike NextGen SIEM is preferred
• Strong Security Framework knowledge
• Be an energetic “self-starter” who is empowered to take ownership and be accountable for deliverables, both individually and as part of a growing team.
• Team player – able to lead, mentor, communicate, collaborate, and work effectively in a globally distributed team.

Who we are

American International Group, Inc. (AIG) is a leading global insurance organization. Building on 100 years of experience, today AIG member companies provide a wide range of property casualty insurance, life insurance, retirement solutions, and other financial services to customers in more than 80 countries and jurisdictions. These diverse offerings include products and services that help businesses and individuals protect their assets, manage risks and provide for retirement security.

Get to know the business (Information Technology)

At AIG, technology is at the heart of everything we do, from underwriting risks to processing claims. The Information Technology team equips our employees with the latest tools to complete their work efficiently and with the highest standards of excellence. The team is responsible for shielding the company’s systems from security risks, while designing technology strategies that enable AIG’s businesses to achieve their goals. AIG’s Information Technology functions include application development and management, enterprise architecture, and technology risk and compliance.

We are an Equal Opportunity Employer

It has been and will continue to be the policy of American International Group, Inc., its subsidiaries and affiliates to be an Equal Opportunity Employer. We provide equal opportunity to all qualified individuals regardless of race, color, religion, age, gender, gender expression, national origin, veteran status, disability or any other legally protected categories. At AIG, we believe that diversity and inclusion are critical to our future and our mission – creating a foundation for a creative workplace that leads to innovation, growth, and profitability. Through a wide variety of programs and initiatives, we invest in each employee, seeking to ensure that our people are not only respected as individuals, but also truly valued for their unique perspectives.

Job Description: Digital Engineering

Job Description: Application Development Lead

Who we are

American International Group, Inc. (AIG) is a leading global insurance organization. Building on 100 years of experience, today AIG member companies provide a wide range of property casualty insurance, life insurance, retirement solutions, and other financial services to customers in more than 80 countries and jurisdictions. These diverse offerings include products and services that help businesses and individuals protect their assets, manage risks and provide for retirement security.

Get to know the business

As a global multinational insurance corporation, AIG navigates an ever-changing and complex legal and regulatory landscape that spans state, federal, and international lines. The Legal team is responsible for providing advice and counsel to our business and functional clients across the company. Our legal professionals help the company avoid legal exposure, while ensuring compliance with local laws and regulations in the countries where AIG operates. Company attorneys also complete innovative deals and help shape the development of cutting-edge insurance products. 

We are an Equal Opportunity Employer

It has been and will continue to be the policy of American International Group, Inc., its subsidiaries and affiliates to be an Equal Opportunity Employer. We provide equal opportunity to all qualified individuals regardless of race, color, religion, age, gender, gender expression, national origin, veteran status, disability or any other legally protected categories. At AIG, we believe that diversity and inclusion are critical to our future and our mission – creating a foundation for a creative workplace that leads to innovation, growth, and profitability. Through a wide variety of programs and initiatives, we invest in each employee, seeking to ensure that our people are not only respected as individuals, but also truly valued for their unique perspectives.