SECURITY ASSURANCE LEAD

PRESENTATION OF GROUP SECURITYWe live in an environment where social unrest, terrorism, disruptive technologies, unpredictable natural disasters, cyber risk and misuse of information are a reality. As a consequence, the decision of our customers to partner with an organization is going to be based on whether they trust that organization to keep them safe and secure. Our role as Group Security is to ensure security is embedded in everything we do. We progressively create an environment that fosters a culture of securing our information assets, takes informed decisions on managing cyber and resiliency risk, and protects our people.Vision: Group Security #assures that AXA is #trusted to be #safe, #secure and #resilient. This is accomplished through;Protect: to provide industry leading security to assure our people, customers and stakeholders that AXA protects them and their informationSupport: to create an environment where security is embedded in everything we doInnovate: to accelerate and support the delivery of innovations, to enable AXA’s future growth plansEnable: to ensure we have the right people, processes, technologies and governance to drive the execution of AXA’s security ambitionsNote that security includes Information security, Operational Resilience, Physical Security Health & SafetyPOSITION MISSION & MAIN ACTIVITIESJob PurposeIn this role, you will be a Leader in the Group Security Assurance team, responsible for developing and managing the continual improvement of the security assurance frameworks and processes, managing global assessment campaigns and helping to drive the security assurance agenda across all AXA businesses. Working dynamically in a global team, you will provide high quality standards and guidelines to ensure assessments are systematic and consistent across our various assessments.This role will require an ambitious individual that has proven ability to lead and manage a team, strategic external partners, deliver engagements and manage a diverse set of stakeholders. This role requires wide experience on managing transversal initiatives.The scope of work includes contribution and maintenance of a Group-wide strategy, framework, policies, and detailed guidance for Security Assurance based on global frameworks including ISO 27001.Oversight of security assessments across our programme of assurance to ensure adherences of assessors to the methodology and procedures defined, maintinaing a standard of excellence.Coordination of efforts and campaigns with CSOs, security teams and security assurance SME.Ensuring Group Security frameworks and instructions remain up to date, and fitr for purpose for the future considering any emerging risks, regulatory change, technology and best practice to ensure AXA remains at the forefront.Provide analysis of a wide range of data to form intelligence and insights about the oragnsiations security maturity and posture,Provide Grou executives with strategic thought leadership on security improvements and programmes.Strong collaboration with a wide range of security stakeholders in Group and Entities to lead on and contribute on strategic initiaitives at a global level.- Reporting to the Security Assurance Executive Manager, this role is accountable for:o Maintaining Assurance frameworks, procedures, guidelines.o Administration and management of security self assessments, including the analysis of reporting from the various companies in the Groupo Driving efficiencies in the assurance process by industrializing the assessment of controls, defining the standards and methods for assessments and maintaining quality control.o Ensuring assessments conducted by Group Assurance are customer focused and aligned to AXA Group and entities needso Contributing to the assurance roadmap for upcoming yearso Working with other areas of Group Security to ensure alignment of Group Assurance to Security instructions, frameworks, and strategyo Ensuring Executives stakeholders in Group Security receive appropriate assurance reporting to make informed decisionso Contribute on strategic initiatives and decisions that impact security at a global levelo Will be required to interact with and present to Executive level leadership including many CEOs, CIOs, CROs and CSOs in addition to deliver presentations to wide audience.Main ActivitiesDevelop and maintain AXA Group Security assurance methods, processese, guidance, and templates to ensure alignment to AXA Group standards and frameworks, business needs and industry best practicesAnticipate and respond to executive reporting and strategic projects within the AXA Group Security organizationManage and deliver strategic projects within the GroupIdentify and monitor changes in the AXA Group security standards, frameworks, processes, and operating environment that implies changes on the assessment of controls or assurance approachSupervise assurance operations to identify areas of improvements, optimizations and alignment to framework and proceduresOnboard and train assessors (internbal and Entities) on the assurance process, and on relevant AXA frameworks (ISO Maturity and SAF etc.)Industrialize the execution of assessments and ensure qualityDefine a quality assurance framework that ensures consistency across the different assessmentsDesign, build and deliver an assurance training program to address key areas of improvements identified on entities assuranceInteract with key stakeholders in entities after assessments to obtain feedback on the assurance process and ensure continuous improvement in quality of the Assurance FrameworksConduct analysis of data and identify relevant trends and key insights to be documented in the Assurance Executive ReportsPresent on a regular basis to senior stakeholders within Security and Group Security and ensure appropriate buy-in and focusContribute to the management and reduction of Internal Audit issues for the Assurance team.PROFILE, SKILLS & COMPETENCIESProfile:Ability to function effectively in a matrix structure & with senior executivesOperate comfortably at management levelPrevious experience in an international environmentSelf-motivated and self-directed, able to work autonomouslyTeam playerExperience interacting with Directors, and all levels of managementAbility to build collaborative relationships with entities, Group Security, and other relevant stakeholdersAbility to define and implement frameworks and processes which support both short and long-term goalsFluent in EnglishExperienced in ISO 27001 as an implmentor and auditor, and well acquainted with a wide variety of ISO based security frameworks and other standards such as NIST.Skills & CompetenciesTechnical Knowledge:Security AssuranceSecurity Governance and RiskInformation Security, Operational Resilience and Physical Security and Safety controlsProject ManagementInternal Control and / or Internal Audit experience.LeadershipEffectively communicates the group vision and goals and the benefits in achieving the same goalTakes calculated risks in decision-making and seeks inputs from the team /stakeholders for the same goalCan effectively mentor others to acquire this competency.Strategic ThinkingIs aware of trends in the external environment and key differentiators vis-à-vis competition and uses this information to anticipate how these changes would impact the organizationRecommends solutions relevant to the complexity, scope, risk, and magnitude of the solving problemMaintains a wider perspective, aligns actions, and contributes to the enhancement of the overall organizational strategy, including outputs from benchmarking activities and reviews.Problem solvingRecommends solutions relevant to the complexity, scope, risk, and magnitude of problem.Decision makingAdvises on decisions regarding strategy, policy, and structures on his/her perimeterQuick to assimilate and integrate new information for informed decision makingMonitor changes in the operating environment, quick to act upon potential opportunities.Able to quickly evaluate a situation or issue and take the initiative within limits of authority.Transversal skills:Strong multi-cultural understanding and applicationAbility to build collaborative relationships with both internal customers and program/project stakeholdersFacilitation, negotiation and influencing skills to achieve results in a matrix management environmentProblem solving, strong analytical skillsAbility to drive global results while remaining sensitive to local environments and cultural issuesAbility to implement processes, resources and objectives which support both short and long-term goalsDecision making and ability to work independently in a complex environmentInformation collection and analysisExcellent communication skillsHigh degree of work ethics and professionalism; leads by example.