Who we are

American International Group, Inc. (AIG) is a leading global insurance organization. AIG member companies provide a wide range of property casualty insurance in approximately 70 countries and jurisdictions. These diverse offerings include products and services that help businesses and individuals protect their assets and manage risks.

We’re also committed to making a positive difference for our colleagues and in the communities where we work and live. We encourage colleagues to give back to the causes they care most about, supporting these efforts through our Volunteer Time Off and Matching Grants Programs.

Get to know the business

General Insurance is a leading provider of insurance products and services for commercial and personal insurance customers. It includes one of the world’s most far-reaching property casualty networks. General Insurance offers a broad range of products to customers through a diversified, multichannel distribution network.

At AIG, technology is at the heart of everything we do, from underwriting risks to processing claims. The Information Technology team equips our employees with the latest tools to complete their work efficiently and with the highest standards of excellence. The team is responsible for shielding the company’s systems from security risks, while designing technology strategies that enable AIG’s businesses to achieve their goals. AIG’s Information Technology functions include application development and management, enterprise architecture, and technology risk and compliance.

About the role

The Information Security Office Governance Lead will spearhead the information security governance process for the Information Security Office, ensuring regulatory alignment for cyber activities, development and sustainment of a comprehensive security strategy, maintaining security policy and supporting standards; delivering Board materials to support AIG’s Chief Information Security Officer, and publishing useful program performance measurements to support leadership decisions and illustrate key cyber risks. This position reports to the Director of Information Security Governance Readiness and Engagement leader.

What you need to know:

• Defines and operationalizes cybersecurity governance processes integrating with the overall AIG governance structure and risk management framework.
• Develop and maintain updated versions of AIG’s Information Security Strategy which reflect the changing threat and regulatory landscape, company goals, and technology and information security priorities.
• Liaises with various governance bodies at AIG to provide visibility into information security initiatives.
• In partnership with AIG’s Regulatory and Legal teams, track regulatory alignment and compliance for the Information Security Program and functions, and support validation exercises as required.
• Works across the organization with business and technology leaders to support implementation of global cybersecurity policies and standards.
• Build and sustain Key Performance Indicators (KPI) to highlight performance against objectives, Key Risk Indicators (KRI) to show how the risk profile is changing over time, and Key Control Indicators (KCI) to illustrate how controls are working.
• Implement and maintain self-assessments such as the industry adopted Cybersecurity Profile to measure maturity of the information security program while focusing on recommendations and opportunities for improvement across security domains.
• Supervise the preparation of cyber and information security presentations which convey material cyber risks and the company’s security posture and cyber strategy to board-level audiences for the the Global Chief Information Security Officer (CISO) and regional/country specific CISOs.
• Participate in critical infrastructure sector activities, including public-private partnership organizations, and with the US Government, representing and participating on behalf of AIG in specific cyber initiatives and forums.
• Manages a small team of Security Office Governance personnel.

What we’re looking for:

• 10+ years of relevant experience in technology and cyber security.
• Bachelor’s Degree or equivalent work experience.
• Wide ranging perspective and experience navigating diverse cultural, legal, operational environments in the public and private sectors.
• Strategic thinking and problem solving; ability to consider a broad range of information/facts and seek input to make informed decisions and solve business problems.
• Strong communication skills; must be able to effectively communicate with senior leadership, peers, and staff across culturally diverse teams.
• Strong collaboration skills: must be able to work with teams/people across all levels of the organization to achieve the desired results.

#LI-LD1

Veterans are encouraged

A look at our Benefits

We're proud to offer a range of employee benefits and resources that help you protect what matters most - your health care, savings, financial protection and wellbeing. We provide a variety of leaves for personal, health, family and military needs. For example, our "Giving Back" program allows you to take up to 16 hours a year to volunteer in your community. Our global mental health and wellness days off provide all colleagues with a paid day off to focus on their mental health and wellbeing.

We also believe in fostering our colleagues' development and offer a range of learning opportunities for colleagues to hone their professional skills to position themselves for the next steps of their careers. We have a tuition reimbursement program for eligible colleagues to enhance their education, skills, and knowledge in areas that relate to their current position or future positions to which they may transfer or progress.

We are an Equal Opportunity Employer