Tech Lead Vulnerability Management

<p><img src="https://www.argusdelassurance.com/mediatheque/6/9/4/000162496.png" /></p> <p><strong>Travailler pour AXA, c&rsquo;est faire partie d&rsquo;une grande famille et aussi l&rsquo;opportunit&eacute; de rejoindre&nbsp;un des leaders de l&rsquo;assurance et de la gestion d&rsquo;actifs dans le monde</strong><strong>.</strong></p> <p>Nous aidons nos 94 millions de clients &agrave; traverser les petites et grandes difficult&eacute;s de la vie. Chaque jour, nous agissons ensemble pour inventer la meilleure mani&egrave;re de les prot&eacute;ger et voulons donner &agrave; chacun les moyens de vivre une vie meilleure.</p> <p>Un challenge qui donne le sourire et envie de se lever le matin !</p> <p>Chez AXA, nous sommes persuad&eacute;s que pour bien prendre soin de nos clients, nous devons commencer par bien prendre<strong>&nbsp;soin de nos collaborateurs</strong>. C&rsquo;est pour cette raison que nous menons une&nbsp;<strong>politique RH engag&eacute;e</strong>&nbsp;qui favorise la&nbsp;diversit&eacute;, qui pr&eacute;serve <strong>l&rsquo;&eacute;quilibre vie priv&eacute;e-vie professionnelle</strong> et acc&eacute;l&egrave;re le d&eacute;veloppement des comp&eacute;tences et des carri&egrave;res.&nbsp;</p> <p><a href="https://www.argusdelassurance.com/les-talents-de-l-assurance/axa/"><strong>Visitez notre page recruteur</strong></a></p>JOB ENVIRONMENT <p>&nbsp;With over 102 million customers in 56 countries, AXA's strong global franchises and three lines of expertise - Property &amp; Casualty, Life &amp; Savings and Asset Management - provide a distinctive business portfolio. As a company whose business is to protect people, we have a responsibility to leverage our skills, resources and risk expertise to build a stronger and safer society. To achieve our mission, we are committed to redefining the standards of our business so that we truly differentiate ourselves and earn the trust of our key stakeholders.&nbsp; </p> <p>&nbsp;As an integral part of AXA, at AXA Group Operations (AXA GO) we create innovative technology and data solutions to help AXA fulfil its ambition of being a customer-focused, tech-led company. AXA GO is a young and dynamic division launched in 2019 and comprises 8,000 employees across 17 countries all around the globe from Paris, France to Pune, India. We are the ones providing advice, steering technological choices and giving AXA access to innovations that will support its transformation into a customer-centric tech-led company. For this, we work in close partnership with all AXA entities. </p> <p>&nbsp;PRESENTATION OF THE CONTEXT AND AXA GROUP SECURITY </p> <p>&nbsp;Throughout AXA, the security community represents 1000 security professionals, working daily to protect our employees, customers, operations and brand. Our operating model gathers the three security disciplines Information Security, Operational Resilience and Physical Security &amp; Safety. Our security mission is to ensure that AXA is safe, secure and resilient.</p> <p>&nbsp;AXA Group Security, as part of AXA GO, defines the security strategy, standards and provides assurance to the Group on the security maturity of all entities across AXA. In its role, it also supports our professional family in entities in maintaining their security posture and respond and coordinate responses to crisis.</p> <p>This is accomplished through four strategic levers:</p> <p>&nbsp;Safe: It is about our people, have them ready to face security challenges including third parties, health professionals</p> <p>&nbsp;Secure: Secure the business of today and tomorrow, by increasing security effectiveness on a risk-based approach for all entities.</p> <p>&nbsp;Resilient: Enhance anticipation, detection and reaction capabilities in case of events &amp; Security by design</p> <p>&nbsp;Simple: Simplify, converge and automate our services and activities</p> <p>&nbsp;The Cyberdefense Product and project team is responsible for creating and updating the tactical product roadmap, managing the operations of the security products, in addition to enhancing product capabilities to execute the strategy defined by Group Security and deliver Cyber products to the AXA entities.</p> <p>&nbsp;The Cyberdefense Product team oversees:</p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; The management and the evolution of existing class 1 (mandatory) products named Vulnerability Management and Compliance Management.</p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; A product is the combination of a Team, supporting information security Processes, operating a technology (Vulnerability and compliance scanning technology) and tools.</p> <p>&nbsp;</p> <p>Our missions are to:</p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; support our business strategy and digital transformation, AXA is setting up a new information security practice to ensure a coordinated response to the increasing threat of cybersecurity in Cloud environment (Public and Private)</p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; The team performs and scheduling compliance and vulnerability scans on AXA network activity and infrastructure and generating reports to different teams (such as server admins, network administrators in order to mitigate scanned vulnerabilities).</p> <p>&nbsp;</p> <p>Our goals are to:</p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Deliver Security compliance measurement to AXA group</p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Improve remediation activities using automation and technology</p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Deliver high quality services to AXA group</p> <p>&nbsp;</p> POSITION MAIN ACTIVITIES <p>&nbsp;As Technical lead, you will</p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Develop and adapt products vision and roadmap in collaboration with the product manager and by discussing with customer / end-users </p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Contribute to the product backlog delivery, such as new feature and improvement, its delivery and its quality</p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Manage and optimize on a day-to-day basis AXA global vulnerability management platform</p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Lead major product and platform evolutions to support Security Operation Center (SOC) and Vulnerability Operation Center (VOC)</p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Lead &ldquo;proof-of-concept&rdquo; and represent AXA as a leading business partner with our third parties/vendor</p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Help evaluate business value and benefits of technical features</p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Determine whether a technical backlog item was satisfactorily delivered </p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Contribute to the day-to-day LOA (run) activities, leading by example</p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Ensure a high level of Quality-of-service (QoS) for AXA internal customers</p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Be a leader for the team and for AXA in term of expertise on the product technology and IS security process, aka Vulnerability management </p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Ensure transparency into the upcoming work of the team </p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Involve all relevant stakeholders (architecture, entities, security, data privacy etc.) to ensure technical feasibility </p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Coordinate internal resources and third parties/vendors for the flawless execution of projects </p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Raise alert and identify solution to ensure on time delivery&nbsp; </p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Evangelize within and outside AXA about the solutions you develop and market them accordingly</p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Regular reporting of progress, risks, and issues towards the product manager and other stakeholders</p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Participate to Product governance and meetup</p> <p>&nbsp;</p> <p>&nbsp;Team structure: The team is led by one Product manager, and 4 people (FTE) for the LOA (run) activity and about 3-4 people part of the team on dedicated strategic project.</p> <p>&nbsp;We are looking for a team member that will support Cyberdefense Product manager as technical lead role.</p> <p>&nbsp;One of our target is to stay at the &ldquo;state of art&rdquo; of security while helping the team to be more agile.</p> <p>Experience</p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Hands-on experience with vulnerability management tools (e.g. Kenna, Tenable, Qualys, Vulcan, Hackuity etc.)</p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Experience in implementing Hardening controls based on Security Industry Standards, such as CIS Benchmarks.</p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Experience in Private and Public Cloud Security&nbsp;</p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Understanding of Workload Protection, including Servers, Workstation, Containers</p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Experience using an ITSM tool such as ServiceNow</p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Strong fundamentals in networking protocols and troubleshooting</p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Knowledge of hacking techniques, cyber threats and security trends</p> <p>&nbsp;</p> <p></p><br><p>Would you like to wake up every day driven and inspired by our noble mission and to work together as one global team to empower people to live a better life?&nbsp; Here at AXA we strive to lead the transformation of our industry. We are looking for talented individuals who come from varied backgrounds, think differently and want to be part of this exciting transformation by challenging the status quo so we can push AXA - a leading global brand and one of the most innovative companies in our industry - onto even greater things.</p> <p>In a fast-evolving world and with a presence in 64 countries, our 166,000 employees and exclusive distributors anticipate change to offer services and solutions tailored to the current and future needs of our 103 million customers.</p> <br><br><p>At AXA, we lead an HR policy that encourages diversity, maintains your professional and private life balance and accelerates the skills and career development: promotion of diversity, remuneration policy, training device, ... Discover everything that makes AXA an employer of choice.</p> <p>Whatever your job is, we strive to offer you career opportunities. Our goal is to develop your skills to support the transformation of our changing business.</p> <br><p>Education&nbsp;</p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Post-graduate degree in IT or a closely-related subject to IS Security.</p> <p>&nbsp;</p> <p>Certification</p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; A certification in relation with Vulnerability Management is highly desired</p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ISC&sup2; CISSP (Certified Information Systems Security Professional) or CCSP (Certified Cloud Security Professional)</p> <p>&nbsp;</p> <p>Overall work experience in the fields</p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Experience in Security &gt; 3 years (required)</p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Experience in Security product day-to-day management (required)</p> <p>&nbsp;</p> <p>Skills</p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Work on maturing vulnerability management &amp; Compliance program services and processes</p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Develop and improve KPIs, metrics, and trend analysis for vulnerability management features</p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Take part of the implementation and operational best practices while taking ownership of tasks and/or project workstreams</p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; PowerShell and Python scripting skills</p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Analytical thinking, time management and coordination skills</p> <p>&nbsp;</p> <p>Language</p> <p>&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Fluent in English is a necessity (including technical Information security English)</p>