Security Assurance Expert

POSITION MAIN ACTIVITIES 

The key responsibilities of the Security Assurance Assessor are the following ones:

• Support the Group Operations Security / Information Security Executive Manager in achieving the department’s objectives. 

·       Contribute to the Information Security Assurance Framework Process (ISAF),

ü  Plan and coordinate the execution of the Security Controls effectiveness testing based on AXA Information Security Assurance Framework

ü  Evaluate compliance & effectiveness of security controls implemented on AXA GO products & processes

ü  Gather and validate associated artifacts and evidence

ü  Perform Primary Security Assurance to track remediation actions and complete the control assessment across all AXA GO divisions and Products

ü  Deliver assurance reporting Product Managers 

·       Contribute to the ISO27001 continuous improvement activities for GO

ü  Contribute / deliver KPI strategy and underlying ISO KPI framework

ü  Execute the Security Controls Measurement Process

§  Perform KPI measurement and reporting (Execution and Reporting Phases)

§  Review these reports with Group Operations Security Officers & Group IT departments heads

§  Review the suitability of defined KPIs (Scoping and Design Phases)

ü  Contribute to the ISO 27001 Maturity assessment every year (self-assessment or external one)

ü  Remediate/Track deficiencies raised by ISO 27001 Maturity assessment

PROFILE, SKILLS & COMPETENCIES

Competencies / Skills

Education & certification

•    Bachelor degree in Computer Science, Engineering, or related field. 
•    An MSc Information Security would be desirable but is not essential
•    ISO 27001 Lead Implementer or ISO 27001 Lead Auditor certification strongly preferred

Overall work experience in the field

·       Experience in information security  > 7 years

·       Should have proven experience of working on ISO27001/2 and/or related security standards Not Mandatory

·      Information Security Auditing experience is strongly recommended 

·      Technical background in information security is strongly recommended (ex: Pentesting)

·       Experience working in Financial Services sector preferred 

Skills / Abilities

·       Ability to effectively operate in a decentralized and political corporate environment

·      Ability to assess security controls implementation and operation (Design effectiveness testing and Operational effectiveness testing)

·       Ability to function effectively in a matrix structure

·       Team player

·       Excellent time management skills (tight deadlines)

·       Good analytical skills and the ability to clearly identify key issues.

·       Strong communication skills – written and verbal

·       Fluent in English

As a world-leading insurance company, we act for human progress by protecting what matters. With 153,000 employees in 54 countries working with 105 million customers, we’ve created a truly dynamic and vibrant community. Inclusion and diversity link closely with our values, and together we’re nurturing a culture of
respect, for each other, for our customers and the communities around us. Join AXA and you’ll feel like you belong, are included and can thrive. You’ll be able to shape the way you work and truly grow your potential as you seek out new opportunities, push boundaries and benefit people in critical moments of their lives. This is your chance to build the tomorrow you want. Know you can.