CISO Health
Enregistrez cette offre et organisez votre recherche
Créez un compte gratuit pour enregistrer des offres d'emploi, créer des alertes et revenir à cette liste depuis votre tableau de bord.
En continuant, vous acceptez nos Conditions d’utilisation & Politique de confidentialité.
As a Health Chief Information Security Officer (CISO) at AXA, you will be instrumental in protecting our health customers' data and operations by defining and driving a robust information security strategy. You will leverage your expertise in healthcare data protection, regulatory compliance, and strong influencing skills to ensure our global health entities maintain a strong and resilient information security posture
About the job
Job purpose
As Health Chief Information Security Officer (CISO), your main objective is to establish, implement, and maintain a comprehensive information security program for all AXA entities providing health insurance products and healthcare services. You will be responsible for defining the information security strategy, ensuring compliance with relevant healthcare regulations, managing information security risks, and fostering a strong information security culture across the health sector. You will optimize and improve information security at both local and regional levels and represent these entities in Group Security working groups and strategic programs, operating under the mandate and authority of the Corporate CSO.
Main missions
Your responsibilities are structured around the NIST Cybersecurity Framework:
- Govern: Develop and communicate a clear health information security vision, strategy, and risk appetite. Establish and enforce information security policies and standards in alignment with Group standards and healthcare-specific regulations (e.g., HIPAA, HDS)
- Identify: Lead the identification, assessment, and mitigation of information security risks specific to health data, electronic health records (EHR), medical devices, and healthcare systems. Monitor the threat landscape relevant to the health insurance business
- Protect: Oversee and guide the effective implementation of information security controls, technologies, and shared services within local entities. Ensure patient data is protected by design in all architectures
- Detect & Respond: Ensure health entities have adequate capabilities to detect and respond to security incidents. Act as a key advisor during major security incidents involving health operations and report on status, risks, and incidents to senior leadership