Security Operations Lead Expert

**Job Description**:
**About AXA**

As a world-leading insurance company, we act for human progress by protecting what matters. With 153,000 employees in 54 countries working for 105 million customers, we’ve created a truly dynamic and vibrant community. Inclusion and diversity link closely with our values, and together we’re nurturing a culture of respect, for each other, for our customers and the communities around us. Join AXA and you’ll feel like you belong, are included and can thrive. You’ll be able to shape the way you work and truly grow your potential as you seek out new opportunities, push boundaries and benefit people in critical moments of their lives. This is your chance to build the tomorrow you want. Know you can.

**About the entity**

AXA is becoming a sustainable tech-led company and at AXA Group Operations we are one of the major catalysts for this transformation.

We set the tone by triggering and empowering the evolution of our insurance business model through technology and innovation, driving its concrete implementation globally at speed, with a high quality of advisory and execution.

We are present across 17 countries with committed, highly qualified teams. We leverage technology, data, sourcing, security and investment allocation in a global way, but also achieve economies of scale and synergies when necessary.

At AXA Group Operations, we want to be recognized in three fields of action:

- State-of-the-art Data Technology to drive customer experience
- State-of-the-art Procurement & Sourcing to drive efficiency and better manage risks
- High-Performing Global Team for stronger partnerships with AXA entities

**Job position pitch**

**About the job**

**Job purpose**

**Main missions**

Your responsibilities include:

- Join and lead the vulnerability management team based in Asia, collaborating closely with global domain teams located worldwide.
- Evaluate the impact of vendor security advisory notifications and communicate findings to relevant stakeholders to devise solutions.
- Prioritize active critical vulnerabilities for remediation based on a risk-based approach and/or the organization's risk appetite.
- Monitor, track, and document all vulnerability status updates in the registry.
- Coordinate with the local Entity Security team to address vulnerabilities detected through the vulnerability management process.
- Analyze structured and unstructured datasets from various sources to identify vulnerabilities and provide remediation recommendations.
- Provide technical guidance to IT Production or Development Teams to effectively remediate vulnerabilities.
- Ensure timely follow-up for vulnerability remediation and assess the risk impact according to internal risk methodologies and frameworks.
- Recommend compensatory measures when remediation is not possible and ensure that the risk acceptance process is followed.
- Assist in investigating security issues by reviewing vulnerability identification results.
- Assist in incident handling, including implementing containment, protection, and remediation activities.
- Perform manual security testing using tools such as BurpSuite and other open-source tools.
- Support Cloud migration projects from a threat and vulnerability management perspective and establish new processes

**Expected skills & experience**

We are looking for someone with the following experience and skills:

- Strong organizational leadership skills in guiding, overseeing, and managing an organization towards its goals, while also being responsible for its overall performance and direction.
- Showcase experience in designing, implementing, enhancing, managing, and governing threat and vulnerability management services.
- Provide evidence of continuous improvement of security threat and vulnerability management and assessment services.
- Demonstrate experience in providing effective incident management support.
- Showcase experience in managing security-related projects using project management methodologies.

**Experience**
- Minimum of 10-12 years of experience in Vulnerability Management and Assessment, specifically related to Infrastructure and Application.
- Overall experience of at least 15+ years
- Bachelor's degree in IT/Computer Science, Engineering, or a related field.
- Extensive experience in SAST/DAST onboarding and rollout.
- Assist in challenging vulnerability findings from penetration testing activities conducted by independent third-party assessors.
- Strong technical understanding of threat and vulnerability assessment activities, processes, and systems.
- Security certifications such as GWAPT, CISSP, CEH, CHFI, or equivalent are highly desirable.
- Excellent communication skills, both written and verbal (English), to communicate effectively with a wide range of stakeholders. Proven ability to explain security issues in business language and business issues in security language.
- Ability to produce high-quality output with a strong focus on attentio