Senior Information Security Assessor

Job Description - Senior Information Security Assessor (14003487D20240111)

Senior Information Security Assessor (

Job Number:

Location: Paris, France or London, UK

As an information security assessor, your responsibilities will include ensuring the effectiveness of Information Security controls throughout AXA XL, aligning with AXA XL assurance methodologies and frameworks. You will lead end-to-end assurance engagements, contribute to scoping and scheduling business engagements, and maintain the quality of assurance testing services delivered by both internal teams and vendors.

Responsibilities:

1. Providing assurance over the effectiveness of Information Security controls across AXA XL entities and building the consolidated picture to AXA XL executive management, also supporting findings resolution or escalation.
2. Expanding the area of expertise and assurance methodologies and contributing to the definition of the AXA XL Security assurance test strategy and approach to ensure AXA XL goals are tracked and met.
3. Conducting need-based audits to assess the effectiveness of Information Security controls.
4. Conducting assessments based on information risk and security requirements.
5. Contributing to the scoping and scheduling of engagements with the business and managing any issues or conflicts.
6. Conducting assurance engagements end-to-end.
7. Contributing to assuring the quality of the assurance testing services provided by vendors or internal teams.

You will report to the Head of Information Security Assurance.

Required Skills:

1. Ability to assess and provide assurance over a broad technology landscape and what it may look like in the future.
2. Technical awareness of security concerns and focus areas when reviewing design documentation.
3. Experience in penetration testing or offensive security roles.
4. Ability to translate technical issues to business risks.
5. Ability to recommend solutions relevant to the complexity, scope, risk, and magnitude of problems impacting the service level.
6. Excellent communication skills with the ability to work effectively with senior management and explain complex matters succinctly and in plain language.
7. Ability to take calculated risks in decision-making and seek inputs from the team/stakeholders.
8. Ability to create mechanisms to recognize individual/group contribution and achievements.
9. Ability to mentor other team members or service providers.
10. Ability to advise on decisions regarding strategy, policy, and structures.
11. Ability to assimilate and integrate new information for informed decision making.
12. Ability to monitor changes in the operating environment and act upon potential opportunities.
13. Ability to weigh things up quickly and take the initiative within limits of authority.

Interpersonal Skills:

1. Ability to demonstrate assertiveness and empathy.
2. Excellent oral communication and persuasive skills.

Qualifications / Experience - Must Have:

1. Bachelor’s degree in information security, computer science, or equivalent.
2. Professional certification in Information Security (e.g., CISSP, CISM, CISA, ISO 27001 Lead Auditor, etc.).
3. Minimum of 5-6 years of experience within Information Security roles.

Qualifications / Experience - Useful:

1. Experience conducting need-based audits to assess the effectiveness of Information Security controls.
2. Experience conducting assessments based on information risk and security requirements.
3. Knowledge and experience with security frameworks (NIST, ISO, CIS 20, MITRE).
4. Audit or control experience (SOX, internal audit, external audit, CISA).
5. Passionate about information risk and security.
6. Interest in financial services industry.

Qualifications / Experience - Optional:

1. Experience in AXA Group environment.

AXA XL is an Equal Opportunity Employer.