Security Governance & Reporting Lead

Key Responsibilities

• The performance of security risk assessments and monitoring remediation
• Providing oversight and governance over physical security and safety
• The performance of and reporting of security frameworks to the Group and other key stakeholders in GBS
• Ensuring accurate reporting of security metrics and performance
• Ensuring GBS maintains the ISO 9001 Quality Management System
• Contribution and maintenance of a GBS wide strategy, framework, policies, and detailed guidance for Security Assurance
• Oversight of security across our services to ensure adherences to security polices, procedures and risk management
• Continuously developing and improving the levels of security in our corporate functions and services
• Crisis coordination and management, business continuity planning, IT service continuity and other key operational resilience aspects
• Driving efficiencies in the security processes by industrializing processes
• Working with other areas of Group Security to ensure alignment of GBS security practices
• Reporting aspects to the risk committees, Group and Executive committees
• Contribute on strategic initiatives and programs
• Will be required to interact with and present to Executive level leadership in addition to delivering presentations to wider audiences.

MAIN ACTIVITIES :

• Managing a team of security professionals based in different locations
• Develop and maintain GBS Security processes, guidance, and templates to ensure alignment to AXA Group standards and frameworks, business needs and industry best practices
• Anticipate and respond to executive reporting and strategic projects
• Manage and deliver strategic projects within GBS and the Group
• Supervise security assurance operations to identify areas of improvements, optimizations and alignment to framework and procedures
• Define security risk processes and procedures, execute risk assessments and the management of those risks
• Interact with key stakeholders in the business lines to ensure security services reports are in place
• Liaise with Entity security teams and be a key point of contact to manage a wide range of security topics
• Present on a regular basis to senior stakeholders within Security and Group Security and ensure appropriate buy-in and focus
• Contribute to the management and reduction of Internal Audit issues
• Define and execute an assurance programme
• Define and execute a programme to manage the ISO 9001 and ISO 27001 assessments.
• Provide location specific oversight on travel security and physical security aspects.

Qualification & Requirements

• University graduate with a degree in Business, IT, or a related subject.
• A post-graduate degree in Security is preferred
• Information Security and /or Information Technology industry certification (CISSP-ISSAP, CISM, CRISC or equivalent) is preferred
• Experience in Security Assurance / Audit > 5 years
• Experience in Security profession within at least one of the Security disciplines (IS / OR / PSS) > 10 years

Benefits

• Insurance Benefits
• Retirement Benefits
• Vacation Policy
• Other Perks and Benefits…