Security Assurance Officer

**Security Assurance Officer** **(**220006F3**)**

**PRIMARY LOCATION**: SPAIN-COMMUNITY OF MADRID-MADRID

**OTHER LOCATIONS**: SPAIN-CATALONIA-BARCELONA

**ORGANIZATION**: Group Operations

**CONTRACT TYPE**: Regular

SCHEDULE**: Full-time

**DESCRIPTION**

**JOB ENVIRONMENT**

Our mission at AXA is to empower people to act for Human progress by protecting what matters. Thus, our role as Group Operations must be to support and to empower all AXA teams in the best way to achieve together this meaningful aspiration.

The most powerful levers to achieve this can be summarized as **Innovation** and **Execution**, and will drive all Operations teams:

- Innovation: To create and provide the prerequisites and opportunities for all AXA teams to develop leading innovative solutions for the needs of our current and future customers
- Execution: To create an environment which allows our teams all over the world to bring their ideas to reality and make our strong promise to the customers happen

Our concrete goals are to:

- Reinforce and realize our value creation for the global AXA organization;
- Support and foster innovation across AXA in a close alignment and teaming with Group Business Innovation;
- Embed simplicity and empowerment in our day-to-day working as well as ensure that we contribute to AXA’s mission and strategy.

**PRESENTATION OF GROUP SECURITY**

Throughout AXA, the security community represents 1000 security professionals, working daily to protect our employees, customers, operations and brand. Our operating model gathers the three security disciplines Information Security, Operational Resilience and Physical Security & Safety. Our security mission is to ensure that AXA is safe, secure and resilient.

AXA Group Security, as part of AXA GO, defines the security strategy, standards and provides assurance to the Group on the security maturity of all entities across AXA. In its role, it also supports our professional family in entities in maintaining their security posture and respond and coordinate responses to crisis.

This is accomplished through four strategic levers:

- **Safe**: It is about our people, have them ready to face security challenges including third parties, health professionals
- **Secure**: Secure the business of today and tomorrow, by increasing security effectiveness on a risk-based approach for all entities.
- **Resilient**: Enhance anticipation, detection and reaction capabilities in case of events & Security by design
- **Simple**: Simplify, converge and automate our services and activities

POSITION MISSION & MAIN ACTIVITIES

**Job Purpose**

In this role, you will be a Senior Professional in the Group Security Assurance team, responsible for conducting converged assurance to support entities on identifying their security posture and the strength of its assurance capabilities. You will identify and understand existing gaps locally and globally, and help AXA entities moving their assurance activities from compliance check to effectiveness testing approach, supporting risk-management decision making, proper prioritization of projects and initiatives and defining adequate improvement plans. The scope of the work includes:

- Provide assurance over effectiveness of Operational Resilience controls, including Business Continuity, Crisis Management and IT Service Continuity Management across AXA entities and build the consolidated picture to AXA executive management. Also support findings resolution or escalation
- Progressively expand the area of expertise to other security disciplines (Information Security and / or Physical Security and Safety) to provide assurance over the effectiveness of other pillars controls
- Contribute to scoping and scheduling of engagements with entities and manage any issues or conflicts
- Contribute to the definition of the Group Security assurance test strategy and approach to ensure Group Security assurance goals are met
- Lead assurance engagements end to end
- Contribute to the definition and maintenance of the Group Security Converged Assurance Framework
- Contribute to assure the quality of the assurance testing services provided by vendors or internal teams

**Main Activities**
- Define the planning of each entity assessment by defining controls in scope, testing plan and the schedule of the assurance sessions
- Manage entities stakeholders involved in the assessments and timely escalating issues to Security Assurance Leads
- Execute the assurance testing with rigor and following assurance procedures
- Draft testing reports of critical issues and provide status updates in a timely manner to the necessary stakeholders
- Share assurance testing outcomes with the entities stakeholders ensuring agreement with the results
- Communicate critical issues and status updates in a timely manner to the necessary stakeholders
- Identify, analyze, and recommend mitigating actions for gaps identified
- Communicate areas of improvements identified in the assu