Local Operations Security Expert

Job Description

AXA Group Operations was created on January 1, 2019. It is a fully-owned AXA Group subsidiary, providing AXA Group companies the best IT and telecommunications infrastructure management services. While the AXA Group represents 157,000 employees and more than 102 million customers, AXA Group Operations operates from 16 locations across the world, employs more than 3,500 people, serves AXA companies in 56 coun-tries and manages an annual budget of around€ 1 billion. Be part of this global and diverse community present across the globe and explore a world of exciting opportunities. Role Description: You collaborate with the Local Operations Security Leader, local entity CISOs team and other local stakeholders as necessary to ensure that information security across the local entity is relevant and cost-effective. You serve as a senior security expert to Group Operations and to management of the entities in the implementation and maintenance of information security Your Main Tasks: As an Information Security Engineer (m / f / x) in the local Operations Security department, you will focus on various infor-mation security activities with the following main responsibilities: • Operate and maintain vulnerability management and policy compliance scanning tool • Perform and improve vulnerability management processes as well as ensure remediation and mitigation actions are appropriately implemented • Evaluate the impact of security threats, risks, vulnerabilities, and processes and provide solutions including cur-rent security trends • Advise IT departments for remediation of vulnerabilities as well as hardening measurements based on the state of the art • Identify and define system security standards to enable other departments to implement appropriate level of in-formation security • Perform password weakness scans and password complexity checks • Define requirements and perform security assessments for projects and applications • Effective communication with varying audiences at multiple levels of the organization to foster and promote In-formation Security Your Profile Your profile: • A degree in computer science, information security, or equivalent professional experience • Certificate in ISO/IEC 27017 cloud security, CISSP, CEH or other relevant standards is a benefit • Demonstrated experience in areas such as technical security, systems security, network security, and/or appli-cation security • Understanding of best practices in information security engineering: security configuration baselines, cryptog-raphy, security operations, systems security, secure development, and incident response • Experience with vulnerabilities, attacker exploit techniques, and methods for their remediation • Strong hands-on mentality and solution focused approach Innovative, creative and team-promoting approach to work • Successfully worked on projects and independently controlled various specialist themes Expertise: • Information Security Management: Policy & Standards; Information Security Strategy; Innovation & Business Improvement; Information Security Awareness and Training; Legal & Regulatory Environment; Third Party Man-agement • Information Risk Management: Risk Assessment; Risk Management • Implementing Secure Systems: Security Architecture; Secure Development • Information Assurance Methodologies and Testing • Operational Security Management: Secure Operations Management; Secure Operations & Service Delivery; Vulnerability Assessment • Incident Management: Incident Management; Investigation; Forensics • Computer Security Information Response Team • Cyber Threat Management • Audit, Assurance & Review: Audit & Review • Business Continuity Management Skills / abilities • Strong interpersonal and communication skills; able to deal effectively with diverse cultures, skill sets and per-sonalities, works effectively as a team player • Organized with a proven ability to prioritize workload, meet deadlines, and utilize time effectively • Ability to function effectively in a matrix structure • Operate comfortably at management level • Strong facilitation, negotiation and conflict resolution skills • Strong analytical skills • Strong team management skills • Apply analytical rigor to understand complex business scenarios • Fluent in English About AXA As a world-leading insurance company, we act for human progress by protecting what matters. With 153,000 employees in 54 countries working with 105 million customers, we’ve created a truly dynamic and vibrant community. Inclusion and diversity link closelywith our values, and together we’re nurturing a culture of respect, for each other, for our customers and the communities around us. Join AXA and you’ll feel like you belong, are included and can thrive. You’ll be able to shape the way you work and truly grow your potential as you seek out new opportunities, push boundariesand benefit people in critical moments of their lives. This is your chance to build the tomorrow you want. Know you can. About the Entity AXA is becoming a sustainable tech-led company and at AXA Group Operations we are one of the major catalysts for this transformation. We set the tone by triggering and empowering the evolution of our insurance business model through technology and innovation, driving its concrete implementation globally at speed, with a high quality of advisory and execution. We are present across 17 countries with committed, highly qualified teams. We leverage technology, data, sourcing, security and investment allocation in a global way, but also achieve economies of scale and synergies when necessary. At AXA Group Operations, we want to be recognized in three fields of action: State-of-the-art Data Technology to drive customer experience State-of-the-art Procurement & Sourcing to drive efficiency and better manage risks High-Performing Global Team for stronger partnerships with AXA entities What We Offer We bring together the expertise, cultural diversity and creativity of over 8,000 employees worldwide and we’re committed to equal opportunities in all aspects of employment (gender, LGBT+, disabled persons, or people of different origins) and to promoting Diversity& Inclusion by creating a work environment where all employees are treated with dignity and respect, and where individual differences are valued.