Operations Security Specialist

You collaborate with the Local Operations Security teams, local entity CISOs team and other local stakeholders as necessary to ensure that information security across the local entity is relevant and cost-effective.

You serve as a security expert to AXA Group Operations; you collaborate will local teams as well as interacting with international transversal ones in the group. You contribute to the implementation of the group security mindset in all topics you’re involved in.

Main missions

• Vulnerability management: Responsible for identifying and mitigating security risks by managing vulnerabilities. This includes assessing patch management processes to ensure comprehensive coverage and effectiveness. When improvements are needed, coordinate with relevant teams, facilitate communication, and track remediation efforts until issues are resolved.
• Contribute to weak password hunting: identify stakeholders and deliver remediation when needed. Provide guidance and deliver remediation recommendations to strengthen password security across the organization.
• Firewall rules security assessment: Participate in the review and risk assessment of firewall rules. Ensure that security risks are properly managed from the initial request through to implementation, maintaining a secure network environment.
• Security incident management: Handle investigations on security incidents jointly with our SOC team. Conduct thorough analysis to assess risks, coordinate containment measures, and implement corrective actions. Contribute to continuous improvement initiatives in security incident response processes.
• Compliance management: Support the preparation of compliance reports and provide local entities with the necessary documentation and evidence to demonstrate adherence to security policies and regulatory requirements.
• Security advisory: Engage with business units to ensure the consistent implementation of group security policies. Promote a security-conscious culture, offer expert advice, and recommend best practices to technical teams to enhance security posture.
• Contribution to governance: Utilize existing tools and processes to provide accurate and timely reports to governance bodies led by AXA Group Operations. Focus on security-related metrics, highlight risks, update on ongoing remediation activities, and support decision-making with comprehensive insights.

• You hold a Bachelor degree in Computer Science, Engineering, or related field.
• An MSc Information Security is a plus

3 years in Security Operations context

Technical skills

Incident and vulnerability management, security tools and investigation technics.

CISSP, CISA, CISM Certification or equivalent

ISO 27xxx certification

ITIL v3 at least foundations

Soft skills / transversal skills

• Autonomy
• Think out of the box
• Strong interpersonal and communication skills; able to deal effectively with diverse cultures, skill sets and personalities, works effectively as a team player
• Organized with a proven ability to prioritize workload, meet deadlines, and use time effectively
• Ability to function effectively in a matrix structure
• Organized with a proven ability to prioritize workload, meet deadlines, and use time effectively
• Strong analytical skills
• Fluent in English