Analyst, Change & Program Management

Job Description

The Analyst, Cybersecurity Change & Program Management provides hands-on execution, coordination and analytical support for AirAsia’s cybersecurity change and transformation initiatives. Reporting to the Senior Manager, Cybersecurity Change & Program Management, this role supports the planning, tracking, reporting and delivery of cybersecurity programs and awareness initiatives, ensuring delivery discipline, data accuracy and smooth cross-functional coordination.

Responsibilities

Program Execution & Coordination

• Support execution of cybersecurity programs and initiatives by maintaining delivery plans, milestones and task trackers
• Coordinate activities across cybersecurity, ICT and business teams to ensure timelines, dependencies and actions are followed through
• Track deliverables, action items and outcomes arising from program and governance meetings
• Support preparation of materials for program reviews, steering committee updates and stakeholder sessions

Change Management & Awareness Support

• Support rollout of cybersecurity awareness campaigns, training initiatives and engagement activities
• Assist with logistics, communications and tracking participation across business units and regions
• Help tailor awareness and change materials for different employee groups and roles.
• Collect feedback from stakeholders and participants to support continuous improvement of change initiatives

Metrics, Reporting & Analysis

• Maintain program dashboards, trackers and reports (e.g. milestones, KPIs, adoption metrics)
• Analyse data related to program progress, awareness engagement and change effectiveness
• Support preparation of monthly and quarterly reports for management and leadership forums
• Ensure documentation and evidence are maintained for audit and assurance purposes

Risk, Issue & Dependency Tracking 

• Track and document key risks, issues, assumptions and dependencies across cybersecurity initiatives
• Monitor risks and issues, escalating emerging concerns to the Senior Manager in a timely manner
• Track mitigation actions and follow up with owners to ensure closure

Stakeholder & Team Support 

• Act as a coordination point between cybersecurity teams, ICT, business units and corporate functions
• Support workshops, working sessions and alignment meetings through preparation and follow-up
• Build effective working relationships through clear communication, reliability and attention to detail

Process & Capability Improvement

• Identify opportunities to improve program tracking, reporting templates and execution processes
• Capture lessons learned and best practices across initiatives
• Support standardisation of tools, templates and ways of working within the cybersecurity PMO

Key Stakeholders

• Senior Manager, Cybersecurity Change & Program Management
• Manager, Cybersecurity Change & Program Management
• Cybersecurity Functional Teams
• ICT and Business Unit Representatives

Skills & Experience

Experience

• 3–6 years of experience in program coordination, project support, change support, or analytical roles.
• Experience working in technology, cybersecurity, digital, or transformation environments is preferred.
• Exposure to enterprise-wide initiatives, awareness programs, or governance processes is an advantage

Program & Change Skills

• Foundational understanding of project or program management concepts.
• Familiarity with change management principles and awareness initiatives.
• Strong organisational skills with the ability to manage multiple tasks and priorities.

Technical & Analytical Skills

• Basic understanding of cybersecurity concepts and risk management (depth not required).
• Strong analytical skills with experience using spreadsheets, dashboards, and presentation tools.
• Comfortable working with data, metrics and structured reporting.

Personal Attributes

• Detail-oriented, disciplined and dependable.
• Proactive, curious and eager to learn.
• Comfortable working in fast-paced environments.
• Strong sense of accountability and ownership of assigned work.