Job Description
As a Health Chief Information Security Officer (CISO) at AXA, you will be instrumental in protecting our health customers' data and operations by defining and driving a robust information security strategy. You will leverage your expertise in healthcare data protection, regulatory compliance, and strong influencing skills to ensure our global health entities maintain a strong and resilient information security posture
About the job
Job purpose
As Health Chief Information Security Officer (CISO), your main objective is to establish, implement, and maintain a comprehensive information security program for all AXA entities providing health insurance products and healthcare services. You will be responsible for defining the information security strategy, ensuring compliance with relevant healthcare regulations, managing information security risks, and fostering a strong information security culture across the health sector. You will optimize and improve information security at both local and regional levels and represent these entities in Group Security working groups and strategic programs, operating under the mandate and authority of the Corporate CSO.
Main missions
Your responsibilities are structured around the NIST Cybersecurity Framework:
- Govern: Develop and communicate a clear health information security vision, strategy, and risk appetite. Establish and enforce information security policies and standards in alignment with Group standards and healthcare-specific regulations (e.g., HIPAA, HDS)
- Identify: Lead the identification, assessment, and mitigation of information security risks specific to health data, electronic health records (EHR), medical devices, and healthcare systems. Monitor the threat landscape relevant to the health insurance business
- Protect: Oversee and guide the effective implementation of information security controls, technologies, and shared services within local entities. Ensure patient data is protected by design in all architectures
- Detect & Respond: Ensure health entities have adequate capabilities to detect and respond to security incidents. Act as a key advisor during major security incidents involving health operations and report on status, risks, and incidents to senior leadership
- Lead & Influence: Lead communities of Information Security Subject Matter Experts, represent health entity needs within Group Security, influence the security budget for health initiatives, and foster a strong security awareness culture
Main missions
Your responsibilities include:
Expected skills & experience
We are looking for someone with the following experience and skills:
Experience
More than 10 years of progressive experience in Information Security, with at least 5 years in a senior leadership role focused on strategy and influence.
Healthcare security experience with knowledge of health data protection and relevant compliance rules.
Experience in an international and multi-cultural environment is an advantage.
Technical skills
- Good knowledge in security risks & controls frameworks (NIST, ISO 27001)
- Experience with electronic health records and patient data protection is crucial
Soft skills / transversal skills
Profile
- Fluent in English. Outstanding oral and written communication skills with proven ability to develop and present concise information
- Strong multi-cultural understanding
- Experience of interacting with Directors and all levels of management
- Team player and able to collaborate, influence and guide others
Strategic Thinking
- Maintains a wider perspective, aligns actions and contributes to the enhancement of the overall organizational strategy, including outputs from benchmarking activities and reviews
- Understands and articulates the projected direction of the organization and how changes to it might impact the group
- Is aware of trends in the external environment and key differentiators vis-à-vis competition and uses this information to anticipate how these changes would impact the organization
Communication competencies
- Ability to communicate appropriately with all levels of the organization including senior executives and technical experts
- Ability to identify the right communication vehicle tailored to the subject matter and the audience
- Proven ability to present material to large audiences via conference calls using both speaking and listening skills to manage messages
- Excellent interpersonal and communication skills (written and verbal)
Transversal skills
- Strong analytical skills: analyze and critically evaluate information as well as formulate plans based on multiple sources of information
- Collaborative mind: ability to build collaborative relationships with both local contacts and group program/project stakeholders
- Adaptability: ability to recommend solutions relevant to the complexity, scope, risk and magnitude of situations
- Problem solving: be able to solve complex problems with innovative solutions across small and large organizations
- Influence: facilitation, negotiation and influencing skills to achieve results both at a group level and at entity level
- Project management: ability to manage action plans, review progress and adjust where required
- Interpersonal skills: assertiveness, empathy, listening oriented, oral communication, persuasive skills
Where will you be in the organization?
The department / team
You will be a key individual contributor responsible for driving the Information Security strategy and its implementation for AXA’s health business lines across Europe and International Market. Your responsibility will be to ensure all health-related entities remain secure and compliant from an information security perspective, leveraging strong influencing and coordination skills across various stakeholders and entities under the Corporate CSO's authority.
What we offer
We bring together the expertise, cultural diversity and creativity of over 8,000 employees worldwide and we’re committed to equal opportunities in all aspects of employment (gender, LGBT+, disabled persons, or people of different origins) and to promoting Diversity & Inclusion by creating a work environment where all employees are treated with dignity and respect, and where individual differences are valued.
About the entity
AXA is becoming a sustainable tech-led company and at AXA Group Operations we are one of the major catalysts for this transformation.
We set the tone by triggering and empowering the evolution of our insurance business model through technology and innovation, driving its concrete implementation globally at speed, with a high quality of advisory and execution.
We are present across 17 countries with committed, highly qualified teams. We leverage technology, data, sourcing, security and investment allocation in a global way, but also achieve economies of scale and synergies when necessary.
At AXA Group Operations, we want to be recognized in three fields of action:
- State-of-the-art Data Technology to drive customer experience
- State-of-the-art Procurement & Sourcing to drive efficiency and better manage risks
- High-Performing Global Team for stronger partnerships with AXA entities
About AXA
As a world-leading insurance company, we act for human progress by protecting what matters. With 153,000 employees in 54 countries working for 105 million customers, we’ve created a truly dynamic and vibrant community. Inclusion and diversity link closely with our values, and together we’re nurturing a culture of respect, for each other, for our customers and the communities around us. Join AXA and you’ll feel like you belong, are included and can thrive. You’ll be able to shape the way you work and truly grow your potential as you seek out new opportunities, push boundaries and benefit people in critical moments of their lives. This is your chance to build the tomorrow you want. Know you can.