CISO Health

As a Health Chief Information Security Officer (CISO) at AXA, you will be instrumental in protecting our health customers' data and operations by defining and driving a robust information security strategy.You will leverage your expertise in healthcare data protection, regulatory compliance, and strong influencing skills to ensure our global health entities maintain a strong and resilient information security posture

About the job

Job purpose

As Health Chief Information Security Officer (CISO), your main objective is to establish, implement, and maintain a comprehensive information security program for all AXA entities providing health insurance products and healthcare services. You will be responsible for defining the information security strategy, ensuring compliance with relevant healthcare regulations, managing information security risks, and fostering a strong information security culture across the health sector. You will optimize and improve information security at both local and regional levels and represent these entities in Group Security working groups and strategic programs, operating under the mandate and authority of the Corporate CSO.

Main missions

Your responsibilities are structured around the NIST Cybersecurity Framework:

• Govern: Develop and communicate a clear health information security vision, strategy, and risk appetite. Establish and enforce information security policies and standards in alignment with Group standards and healthcare-specific regulations (e.g., HIPAA, HDS)
• Identify: Lead the identification, assessment, and mitigation of information security risks specific to health data, electronic health records (EHR), medical devices, and healthcare systems. Monitor the threat landscape relevant to the health insurance business
• Protect: Oversee and guide the effective implementation of information security controls, technologies, and shared services within local entities. Ensure patient data is protected by design in all architectures
• Detect & Respond: Ensure health entities have adequate capabilities to detect and respond to security incidents. Act as a key advisor during major security incidents involving health operations and report on status, risks, and incidents to senior leadership
• Lead & Influence: Lead communities of Information Security Subject Matter Experts, represent health entity needs within Group Security, influence the security budget for health initiatives, and foster a strong security awareness culture

Main missions

Your responsibilities include:

Expected skills & experience

We are looking for someone with the following experience and skills:

Experience

More than 10 years of progressive experience in Information Security, with at least 5 years in a senior leadership role focused on strategy and influence.

Healthcare security experience with knowledge of health data protection and relevant compliance rules.

Experience in an international and multi-cultural environment is an advantage.

Technical skills

• Good knowledge in security risks & controls frameworks (NIST, ISO 27001)
• Experience with electronic health records and patient data protection is crucial

Soft skills / transversal skills

Profile

• Fluent in English. Outstanding oral and written communication skills with proven ability to develop and present concise information
• Strong multi-cultural understanding
• Experience of interacting with Directors and all levels of management
• Team player and able to collaborate, influence and guide others

Strategic Thinking

• Maintains a wider perspective, aligns actions and contributes to the enhancement of the overall organizational strategy, including outputs from benchmarking activities and reviews
• Understands and articulates the projected direction of the organization and how changes to it might impact the group
• Is aware of trends in the external environment and key differentiators vis‑à‑vis competition and uses this information to anticipate how these changes would impact the organization

Communication competencies

• Ability to communicate appropriately with all levels of the organization including senior executives and technical experts
• Ability to identify the right communication vehicle tailored to the subject matter and the audience
• Proven ability to present material to large audiences via conference calls using both speaking and listening skills to manage messages
• Excellent interpersonal and communication skills (written and verbal)

Transversal skills

• Strong analytical skills: analyze and critically evaluate information as well as formulate plans based on multiple sources of information
• Collaborative mind: ability to build collaborative