Senior Technical Programme Manager, Cyber Resilience Programme

AIA Digital+; Kuala Lumpur; On-site; MYR 300,000 - 520,000; Full time

Job summary

AIA Digital+ is seeking a Senior Programme Manager to lead the end-to-end delivery of a group-wide Cyber Resilience Programme. You will oversee architecture, design, implementation, testing and handover across Group Office and Business Units, coordinating with Workstream Leads and vendors to ensure on-time delivery and adherence to regulatory expectations.

You will develop an integrated roadmap, manage risks and dependencies, and drive governance, reporting and assurance across multiple

Qualifications

• Bachelor’s degree in Information Technology, Business, or related field.
• 15+ years delivering large-scale technology or transformation programs.
• Experience managing complex multi-country initiatives with multiple stakeholders and vendors.
• Experience leading complex infrastructure or resilience programmes across architecture and design, implementation, testing and operational transition.
• Experience in financial services or regulated industries.

Responsibilities

• Manage end-to-end programme delivery across all workstreams, from architecture and solution design through implementation, testing and operational handover.
• Accountable for completion of solution implementation and testing across Group Office and Business Units, driving delivery through Workstream Leads and Business Units responsible for execution, including pilot deployments and regional rollout.
• Develop and manage an integrated programme roadmap and delivery plan covering workstream and Business Unit commitments, dependencies, architecture and design approvals, implementation milestones, testing and acceptance criteria.
• Monitor risks, issues, dependencies, and escalations to ensure delivery against agreed scope, timelines, and outcomes.
• Ensure business-led Minimum Viable Company (MVC), Important Business Services (IBS), impact tolerances and dependency requirements are translated into agreed recovery scope, priorities, sequencing and delivery acceptance criteria across Group Office and Business Units.
• Coordinate technical implementation activities across Cyber Security, Infrastructure, Cloud, and technology teams.
• Drive timely completion of architecture reviews, design approvals, recovery testing and operational readiness activities through the responsible technical owners, Workstreams and Business Units.
• Ensure that responsible technical owners assess and confirm compliance with technology standards, security requirements and resilience objectives, with exceptions resolved or formally accepted through programme governance.
• Ensure recovery validation and agreed test exercises are completed against approved acceptance criteria, with defects and gaps tracked to closure or formally accepted by the appropriate owners before rollout or handover.
• Act as the primary liaison between AIA, implementation partners, vendors, and internal stakeholders.
• Manage vendor performance, deliverables, dependencies, and escalations.
• Drive stakeholder alignment, decision-making, and cross-functional collaboration.
• Engage senior management and programme sponsors through regular updates and governance forums.
• Manage the financial planning, forecasting and funding submissions in partnership with the IT Finance workstream.
• Identify and raise resourcing, budget, and delivery challenges.
• Support business case development, procurement activities, and onboarding of programme resources.
• Establish programme governance structures, reporting processes, and PMO controls.
• Produce executive dashboards and regular reporting on programme status, risks, issues, and key decisions.
• Maintain RAID logs, dependency tracking, and benefits realization reporting.
• Manage programme stage-gate readiness, consolidate required delivery and assurance evidence, and secure approvals from the designated decision owners before progression; route material changes through approved programme governance
• Ensure operational handover and transition to BAU are completed, including required documentation, confirmed operational ownership, appropriate Business Unit and operational acceptance, and supporting evidence for audit and assurance.

Skills

Leadership

Stakeholder engagement

PMO skills

Planning

Analytical thinking

Problem solving

Attention to detail

Delivery leadership

Vendor management

Programme governance

Financial management

Cyber resilience knowledge

Regulatory understanding

Education

Bachelor’s degree in IT/Business or related field

Job description

Lead the end-to-end delivery of AIA’s Group-wide Cyber Resilience Programme, overseeing all workstreams from architecture and solution design through implementation, rollout, testing and operational handover.

Accountable for ensuring that implementation and testing of the Cyber Recovery Solution are completed across Group Office and Business Units, with Workstream Leads and Business Units responsible for execution within their respective scopes.

Own programme governance, integrated delivery planning, stakeholder management, budget control and vendor coordination, ensuring delivery against strategic objectives, regulatory expectations and agreed scope, timelines and acceptance criteria.

Roles and Responsibilities:

• Manage end-to-end programme delivery across all workstreams, from architecture and solution design through implementation, testing and operational handover.
• Accountable for completion of solution implementation and testing across Group Office and Business Units, driving delivery through Workstream Leads and Business Units responsible for execution, including pilot deployments and regional rollout.
• Develop and manage an integrated programme roadmap and delivery plan covering workstream and Business Unit commitments, dependencies, architecture and design approvals, implementation milestones, testing and acceptance criteria.
• Monitor risks, issues, dependencies, and escalations to ensure delivery against agreed scope, timelines, and outcomes.
• Ensure business-led Minimum Viable Company (MVC), Important Business Services (IBS), impact tolerances and dependency requirements are translated into agreed recovery scope, priorities, sequencing and delivery acceptance criteria across Group Office and Business Units.

Technical Delivery Oversight

• Coordinate technical implementation activities across Cyber Security, Infrastructure, Cloud, and technology teams.
• Drive timely completion of architecture reviews, design approvals, recovery testing and operational readiness activities through the responsible technical owners, Workstreams and Business Units.
• Ensure that responsible technical owners assess and confirm compliance with technology standards, security requirements and resilience objectives, with exceptions resolved or formally accepted through programme governance.
• Ensure recovery validation and agreed test exercises are completed against approved acceptance criteria, with defects and gaps tracked to closure or formally accepted by the appropriate owners before rollout or handover.
• Act as the primary liaison between AIA, implementation partners, vendors, and internal stakeholders.
• Manage vendor performance, deliverables, dependencies, and escalations.
• Drive stakeholder alignment, decision-making, and cross-functional collaboration.
• Engage senior management and programme sponsors through regular updates and governance forums.

Resources, Budget & Financial Management

• Manage the financial planning, forecasting and funding submissions in partnership with the IT Finance workstream.
• Identify and raise resourcing, budget, and delivery challenges.
• Support business case development, procurement activities, and onboarding of programme resources.

Governance, Reporting & Assurance

• Establish programme governance structures, reporting processes, and PMO controls.
• Produce executive dashboards and regular reporting on programme status, risks, issues, and key decisions.
• Maintain RAID logs, dependency tracking, and benefits realization reporting.
• Manage programme stage-gate readiness, consolidate required delivery and assurance evidence, and secure approvals from the designated decision owners before progression; route material changes through approved programme governance
• Ensure operational handover and transition to BAU are completed, including required documentation, confirmed operational ownership, appropriate Business Unit and operational acceptance, and supporting evidence for audit and assurance.

Required Education and Experience:

• Bachelor’s degree in Information Technology, Business, or related field
• 15+ years' delivering large-scale technology or transformation programs
• Experience managing complex multi-country initiatives involving multiple stakeholders and vendors
• Experience leading complex infrastructure or resilience programmes across architecture and design, implementation, testing and operational transition
• Experience in financial services or regulated industries

Required Skills:

• Leadership, communication, and stakeholder engagement skills.
• General and project management skills such as planning, analytical and problem-solving, attention to detail, and able to deliver (and deliver through others) independently under minimum supervision.
• Knowledge of tools and techniques for effective programme management
• Capable of managing third-party vendors and remote contributors
• Programme governance, financial management, and delivery leadership
• Strong working knowledge of cyber resilience, cyber recovery, disaster recovery, enterprise infrastructure, cloud platforms, storage, and backup and recovery solutions, sufficient to challenge delivery assumptions, dependencies and technical risks.
• Ability to assess implementation and recovery test plans, readiness evidence and acceptance criteria, and drive resolution of delivery gaps with technical owners
• Understanding of regulatory and industry expectations relating to operational resilience, cyber resilience, and technology resilience

Advantageous Education, Experience or Skills:

• Experience delivering cyber recovery solutions across multiple entities or countries
• PMP, PRINCE2, PgMP, MSP, or equivalent certification
• Familiarity with ITIL practices and service transition.