Information Security Architect

In this role you will ensure that design, operation, and governance of technology align with regulatory requirements and the evolving threat landscape. You will embed security end-to-end across systems, processes, and third-party interactions by defining standards and conducting architecture reviews. You will translate risk and threat intelligence into actionable design decisions and act as a key interface between business, IT, and security teams. You will drive the security architecture capability and enable risk-based decision-making at scale within Allianz Global Investors.

• pension / retirement plans
• share purchase plan
• mental health and wellbeing programs
• career development and certifications
• flexible and dynamic work environment

• Contribute to the global information security programme, updating policies, standards, frameworks, processes, and tools
• Perform security architecture and governance reviews for systems, applications, and initiatives
• Assess cloud-native services, analytics, or AI-enabled components for secure design and data protection
• Conduct threat modelling and contribute to preventive/detective control design
• Prepare and contribute to information security governance forums and reporting to senior management
• Act as regional information security contact for auditors, risk management, and partners; support harmonisation of governance practices
• Support security awareness and collaboration across Asia and Europe with IAM and Cybersecurity teams

• Strong foundation in Information Security Management, governance, risk management, and architecture in a regulated environment
• Knowledge of ISO 27001/27005, NIST CSF; familiarity with DORA, NIS2
• Hands-on experience creating actionable security policies, procedures, and control testing
• Experience with threat modelling and risk assessment frameworks
• Understanding of cloud services, data platforms, and AI-enabled solutions
• Excellent communication with diverse, international stakeholders; experience engaging executives, boards, auditors, and regulators
• Structured, reliable, solution-oriented working style; ability to manage multiple priorities
• Proficiency in English; additional German/Mandarin/Cantonese is a plus

• Strong communication
• Stakeholder management
• Collaborative mindset
• Information security governance
• Threat modelling
• Risk assessment methodologies