Information Security Assessor

Information Security Assessor

Paris, France or London, UK

As an information security assessor, your responsibilities will include ensuring the effectiveness of Information Security controls throughout AXA XL, aligning with AXA XL assurance methodologies and frameworks.

You will lead end-to-end assurance engagements, contribute to scoping and scheduling business engagements, and maintain the quality of assurance testing services delivered by both internal teams and vendors.

DISCOVERyour opportunity

• Providing assurance over the effectiveness of Information Security controls across AXA XL entities and building the consolidated picture to AXA XL executive management, also supporting findings resolution or escalation.
• Expanding the area of expertise and assurance methodologies and contributing to the definition of the AXA XL Security assurance test strategy and approach to ensure AXA XL goals are tracked and met.
• Conducting need-based audits to assess the effectiveness of Information Security controls.
• Conducting assessments based on information risk and security requirements.
• Contributing to the scoping and scheduling of engagements with the business and managing any issues or conflicts.
• Conducting assurance engagements end-to-end.
• Contributing to assuring the quality of the assurance testing services provided by vendors or internal teams.

You will report to the Head of Information Security Assurance.

SHARE your talent

We are looking for someone who possesses the following abilities and skills :

Technical :

o Ability to assess and provide assurance over a broad technology landscape and what it may look like in the future.

o technical awareness of security concerns and focus areas when reviewing design documentation.

o Experience in penetration testing or offensive security roles.

o Ability to translate technical issues to business risks.

Problem solving :

o Ability to recommend solutions relevant to the complexity, scope, risk, and magnitude of problems impacting the service level.

Management :

o Excellent communication skills with the ability to work effectively with senior management and explain complex matters succinctly and in plain language.

o Ability to take calculated risks in decision-making and seek inputs from the team / stakeholders.

o Ability to create mechanisms to recognize individual / group contribution and achievements.

o Ability to mentor other team members or service providers.

Decision making :

o Ability to advise on decisions regarding strategy, policy, and structures.

o Ability to assimilate and integrate new information for informed decision making.

o Ability to monitor changes in the operating environment and act upon potential opportunities.

o Ability to weigh things up quickly and take the initiative within limits of authority.

Interpersonal skills :

o Ability to demonstrate assertiveness and empathy.

o Excellent oral communication and persuasive skills.

Qualifications / Experience - Must Have :

o bachelor’s degree in information security, computer science, or equivalent.

o Professional certification in Information Security (, CISSP, CISM, CISA, ISO 27001 Lead Auditor, etc.).

o Minimum of 5-6 years of experience within Information Security roles.

Qualifications / Experience - Useful :

o Experience conducting need-based audits to assess the effectiveness of Information Security controls.

o Experience conducting assessments based on information risk and security requirements.

o Knowledge and experience with security frameworks (NIST, ISO, CIS 20, MITRE).

o Audit or control experience (SOX, internal audit, external audit, CISA).

o Passionate about information risk and security.

o Interest in financial services industry.

Qualifications / Experience - Optional :

o Experience in AXA Group environment.

FIND your future

AXA XL, the P&C and specialty risk division of AXA, is known for solving complex risks. For mid-sized companies, multinationals and even some inspirational individuals we don’t just provide re / insurance, we reinvent it.

How? By combining a strong and efficient capital platform, data-driven insights, leading technology, and the best talent in an agile and inclusive workspace, empowered to deliver top client service across all our lines of business property, casualty, professional, financial lines and specialty.

With an innovative and flexible approach to risk solutions, we partner with those who move the world forward.

At AXA XL we are happy to talk flexible working. We are committed to building a diverse and inclusive workforce and consider flexible ways of working for every role.

Talk to us about how we can make flexibility work for you.

Corporate Responsibility

At AXA XL our approach to corporate responsibility (CR) is the same as our approach to business; constantly seeking to provide innovative solutions to the world’s most complex problems.

From offering our expertise, products and services to help build more resilient communities, to advancing understanding and response to climate change, our strategy Our Impact.

Our Future. aligns key issues that are pertinent to our business climate, water and financial resilience - and contributes to AXA Group’s purpose to Act for human progress by protecting what matters. .

• Climate : We’re reducing our carbon footprint, protecting ecosystems and exploring how our business can help build a better world.
• Water : We’re developing water resilience where it is and will be needed most.
• Financial resilience : We’re helping create opportunities for the unemployed and underemployed, so they can be better prepared for unexpected changes.
• Hearts in Action : We have established volunteering and charitable giving programs to help colleagues support causes that matter most to them, known as our Hearts in Action programs.

Diversity & Inclusion

At AXA XL, we know that an inclusive culture and a diverse workforce enable business growth and are critical to our success.

That’s why we have made a strategic commitment to attract, develop, advance and retain the most diverse workforce possible, while creating an inclusive culture where everyone can bring their full selves to work and can reach their highest potential.

• Five Business Resource Groups focused on gender, LGBTQ+, race / ethnicity, disability and inclusion with 20 Chapters around the globe
• Robust support for Flexible Working Arrangements
• Enhanced family friendly leave benefits
• Named to the Diversity Best Practices Index
• Signatory to the UK Women in Finance Charter
Il y a plus de 30 jours