Security Assurance Executive Manager

**PRESENTATION OF GROUP SECURITY**

***

We live in an environment where social unrest, terrorism, disruptive technologies, unpredictable natural disasters, cyber risk and misuse of information are a reality. As a consequence, the decision of our customers to partner with an organization is going to be based on whether they trust that organization to keep them safe and secure. Our role as Group Security is to monitor the security threats landscape, analyze and anticipate their impact on AXA Group, identify vulnerabilities and associated risks, define and oversee implementation of Group-wide security strategy, standards, instructions and security awareness & training campaigns.

Vision: Group Security **#assures** that AXA is **#trusted** to be** #safe, #secure and #resilient**. This is accomplished through;

**Protect**:to **provide industry leading security **to assure our people, customers and stakeholders that AXA protects them and their information

**Support**:to create an environment where **security is embedded in everything we do**

**Innovate**:to **accelerate and support the delivery of innovations**, to enable AXA’s future growth plans

**Enable**: to ensure we have the **right people, processes, technologies **and **governance** to drive the execution of AXA’s security ambitions

Note that security includes Information Security, Operational Resilience, Physical Security and Health and Safety.

POSITION MISSION & MAIN ACTIVITIES

**Job Purpose**
- As a second line of controls, measure and report on compliance with Security standards & instructions
- Lead Assurance activities to ensure compliance with AXA Group standards & instructions, Industry ISO standard, and internal controls. Manage the delivery of Compliance assurance
- Direct and oversee the team conducting gap analyses with instructions and standards, Industry ISO standard, internal controls and provide recommendations and drive implementation.
- Lead, manage, and coordinate reporting, investigations and tracking of deviation identified during control assurance assessment
- Lead the definition of the Group ISO 27000 assessment strategy and approach to ensure continuous measurement and improvement in the entities
- Direct and oversee ISO 27000 program and support the entities in raising their security maturity levels through consultation, assessment and consulting
- Lead and direct the development, implementation and embed fit for purpose Integrated assurance management systems which meet the requirements of ISO27000 and other relevant standards,
- Direct and oversee formal ISO 27000 certification consulting and preparation to entities pursuing the certification
- The post holder will be responsible for leading a program of Governance and assurance activities across the AXA Group supporting the implementation of a cohesive QA strategy assisting entities to develop their governance and assurance strategies
- Lead the program to verify AXA Group’s entities adherence with Security Instructions and Group expectations by verifying general security control assurance
- Coordinate the verification of the accuracy of the reporting & Self-assessment provided by the entities to the Group through sample-based general security control testing
- Provide guidance and oversight into security consulting assurance activities
- Provide leadership of a team of competent and highly qualified security management specialists who in turn will provide competent advice and leading solutions into the operational business

**Main Activities**
- Establish and monitor the set up and industrialization of Quality Assurance and Testing services across all group services
- Provide oversight, lead and manage the establishment of Security Assurance processes and procedures and roll out to across the Group, acquisitions and vendors
- Provide competent, strategic governance and assurance security management advice to AXA Group, establishing suitable and appropriate policy, process and security management solutions ensuring that the business meets its Security obligations
- Lead and oversee all assurance testing activities, the assurance testing teams and work with other Assurance-related stakeholders
- Lead and manage the Global Assurance Center providing assurance testing capabilities to the entities
- Lead, manage and guide the team performing analysis of functional specifications for completeness and to identify testing requirements
- Direct and oversee relevant aspects of testing, assurance, release management and environment management
- Embed Information Security Quality Assurance and Testing within a wide variety of projects
- Lead the development, deployment and maintenance of a Security assurance testing framework and documentation to improve proficiency and quality
- Lead, manage and define ISO 27000 scope and coordinate independent and entity self-assessments across AXA Group with the view of internalizing independent assessments
- Lead assessment, analyzing a