Overview
Senior Information Security Specialist, Policy & Standards – Ipswich, UK or Paris, France
AXA XL is an Equal Opportunity Employer.
What you’ll be doing
* You must have an established IT background and a good understanding of IT and Security technologies.
* Translating technical jargon and complex IT risks into business language is a must.
* Maintaining the Information Security Policy (ISP) and Standards, ensuring proposed changes are evaluated and writing additional Standards and Guidelines.
* Capture updates from both AXA Group and AXA XL stakeholders.
* Participate in the AXA Group Policy Working Group (PWG); perform gap analysis of changes against AXA XL ISP and Standards, highlight differences, and discuss effort required to comply (BAU or project).
* Prepare and present new and existing security policies and standards requiring change to the Information Security Steering Committee (ISSC) for discussion, questions, and approval.
* Present ISP and Security Standards updates to the Security Committee (SecCom), including C-level participants.
* Maintain and improve the Policy and Standards Tracker, ensuring changes are accurately recorded.
* Provide formal feedback to AXA Group Security on changes agreed or rejected by AXA XL.
* Ensure all IS documentation is reviewed at least annually, recording approved updates.
* Use diverse sources to monitor emerging threats and technologies; perform gap analysis against the existing ISP and Standards and produce recommended updates for the ISSC.
* Promote use of the ISP and Standards across AXA XL by collaborating with Internal Communications and other team leads as required.
* Provide guidance in response to questions on ISP and Standards requirements.
* Maintain and update the Policies and Standards page of the IS SharePoint site.
What you’ll bring
We’re looking for someone who has these abilities and skills:
Required Skills and Abilities:
* Hold an active ISC2 CISSP or ISACA CISM certification (Required)
* A good understanding of Cloud technologies (Preferred)
* Effective English written and verbal skills mandatory
* Proficient in writing security policies and security standards (Required)
* Expert analytical and reporting skills (Required)
* Expert in Microsoft Office (Word, Excel, PowerPoint, SharePoint) (Required)
* Ability to effectively communicate and positively influence diverse stakeholders and team members (Required)
* Excellent attention to detail and the ability to create clear, concise and engaging presentations (Required)
Desired Skills and Abilities:
* Experience in global companies (Preferred)
* Experience in information security management reporting and related methodologies (Preferred)
* Experience in implementing ISO 27001/NIST/CSA (Preferred)
* Knowledge of Information Security and Information Technology in relation to application of Policies (Preferred)
What we offer
Inclusion
AXA XL is committed to equal employment opportunity and will consider applicants regardless of gender, sexual orientation, age, ethnicity and origins, marital status, religion, disability, or any other protected characteristic. At AXA XL, we know that an inclusive culture enables business growth and is critical to our success. That’s why we have made a strategic commitment to attract, develop, advance and retain the most inclusive workforce possible, and create a culture where everyone can bring their full selves to work and reach their highest potential. It’s about helping one another — and our business — to move forward and succeed.
* Five Business Resource Groups focused on gender, LGBTQ+, ethnicity and origins, disability and inclusion with 20 Chapters around the globe.
* Robust support for Flexible Working Arrangements
* Enhanced family-friendly leave benefits
* Named to the Diversity Best Practices Index
* Signatory to the UK Women in Finance Charter
Learn more at axaxl.com/about-us/inclusion-and-diversity. AXA XL is an Equal Opportunity Employer.
Total Rewards
AXA XL’s Reward program is designed to take care of what matters most to you, including health, wellbeing, lifestyle and financial security. It provides competitive compensation and personalized, inclusive benefits that evolve as you do. We’re committed to rewarding your contribution for the long term, so you can be your best self today and look forward to the future with confidence.
Sustainability
At AXA XL, Sustainability is integral to our business strategy. Our 2023-26 Sustainability strategy, called “Roots of resilience”, focuses on protecting natural ecosystems, addressing climate change, and embedding sustainable practices across our operations.
* Valuing nature: Protecting ecosystems and promoting biodiversity; committing to nature-friendly practices.
* Addressing climate change: Building a net zero strategy, developing insurance products and services, and advancing thought leadership.
* Integrating ESG: Embedding ESG into internal processes and governance.
* AXA Hearts in Action: Volunteering and charitable giving programs.
For more information, please see axaxl.com/sustainability.
Who we are
AXA XL, the P&C and specialty risk division of AXA, provides risk solutions with a combination of capital efficiency, data-driven insights, technology, and talent.
Learn more at axaxl.com
#J-18808-Ljbffr