Security Risk Expert

PROFILE

Education
Bachelor degree in Computer Science Engineering or related field
An MSc Information Security and Operational Risk Management is strongly preferred

Certifications
Information Security and /or Information Technology industry certifications in good standing (CRISC CISSP CISM ISO27005 Certified Risk Manager ISO27001 Lead Auditor or equivalent) strongly preferred
CBCI & Physical Security certifications are desirable

Overall work experience in the field
Experience in articulating security risks in business language and advising on the appropriate risk management strategy > 5 years
Experience in Information Security field > 5 years
Experience in Operational Resilience > 2 years
Experience in Physical Security / Health & Safety > 2 years

Skills / abilities
Ability to function effectively in a matrix structure
Ability to cope with uncertainty
Operate adequately at senior and executive management level
Solid facilitation negotiation and conflict resolution skills
Proficient risk assessment interpretation and analytical skills
Strong networking skills
Team player
Fluent in English

As a worldleading insurance company we act for human progress by protecting what matters. With 153000 employees in 54 countries working with 105 million customers weve created a truly dynamic and vibrant community. Inclusion and diversity link closely with our values and together were nurturing a culture of
respect for each other for our customers and the communities around us. Join AXA and youll feel like you belong are included and can thrive. Youll be able to shape the way you work and truly grow your potential as you seek out new opportunities push boundaries and benefit people in critical moments of their lives. This is your chance to build the tomorrow you want. Know you can.

PRESENTATION OF THE CONTEXT AND AXA GROUP SECURITY

Throughout AXA the security community consists of 1000 security professionals dedicated to protecting our employees customers operations and brand. Our operating model integrates three key security disciplines: Information Security Operational Resilience and Physical Security & Safety. Our mission is to ensure that AXA remains safe secure and resilient.
AXA Group Security as part of AXA GO defines the security strategy and standards providing assurance to the Group on the security maturity of all AXA entities. Additionally it supports our professional family within entities to maintain their security posture and coordinate responses to crises.

This mission is achieved through four strategic levers:

Safe: Focuses on our people ensuring they are prepared to face security challenges including those involving third parties and health professionals.
Secure: Secures the business of today and tomorrow by enhancing security effectiveness through a riskbased approach for all entities.
Resilient: Enhances anticipation detection and reaction capabilities in case of events incorporating Security by Design.
Simple: Simplifies converges and automates our services and activities.

PRESENTATION OF THE GROUP SECURITY RISK TEAM

The Security Risk team at AXA is dedicated to identifying monitoring and prioritizing key security risks across three main disciplines: Information Security Operational Resilience and Physical Security. These areas are crucial to AXAs goal of securing the customer journey and providing resilient services. Over the past few years the focus on embedding risk and related data vectors has been strengthened making them central to an effective security strategy and program that can measure and quantify risk. The team also manages Vendor Security.
As a member of this dynamic and collaborative global team you will work closely with Group executives security management teams security experts and Chief Security Officers from various operating companies worldwide. The team is responsible for both the security risk framework and the vendor security risk framework.

Our main missions include :
Defining the requirements and capabilities for security risk management and vendor security risk.
Supporting the reduction and prioritization of security activities.
Monitoring key security risks for the Group and communicating them to relevant parties.
Developing and sustaining Security Risk Management maturity and risk awareness.
Acting as a trusted advisor to support business decisions driven by risk.

Our goals are to :
Design maintain and improve a converged Security Risk framework and associated methodologies/tools including entitybased assetbased and vendor security risk assessments.
Provide training and support to our entities in implementing and improving their local Security Risk Management Framework.
Determine the Groups security risk posture to support strategic initiatives on risk reduction and prioritization.
Continuously improve Vendor Security Information Security risk management and Data classification instructions and related frameworks.
Identify and assess key transversal risks for the Group.
Offer subject matter expertise and advisory on security riskrelated topics.
Foster a riskaware culture across our entities through our Security Risk Community.

You will work transversally daily with reinforced interaction and coconstruction as a guiding principle.

Your stakeholders
Internally: You will engage with AXA Group Risk & Internal Audit IT Leadership & Business Leadership Group Compliance & Legal IT Operations & Business Operations as well as Local/Regional CSO and Security team members.
Externally: You are expected to interact with external third parties.

Your Certifications

Security and/or Information Technology industry certifications: Preferred certifications include ISO 27001 (Implementer/Auditor) CISSP CRISC CISA and CISM. Other relevant certifications are CEH (Certified Ethical Hacker) CCSP (Certified Cloud Security Professional) and GIAC (Global Information Assurance Certification) GRC related experience.