Stage - PMO Pentest

Référence de l’offre
230000N2

Type de contrat
Stage

Niveau d'expérience
Etudiants

Société du groupeAXA Investment Managers

Famille métier
IT, Data & Transformation

Localisation
PUTEAUX, Hauts-de-Seine

**Votre rôle et vos missions**:
**Department description**:
Within the Security Department, Information security department is in charge of the design of the information security strategy, standards for AXA IM and of the management and the control of risks related to information and systems. The team is in charge of the program management, awareness & communications, penetration testing coordination and information security requirements for third parties. The team also manages a Security Incident Response Team.

Within this international and multicultural team, the job purpose is to manage AXA IM penetration testing program and analyzing the information security requirements form from the third parties and Information Security clauses in contracts. The role will also include the preparation of AXA IM due diligences answer on Information Security for partners.

**Main responsibilities**:
Manage Information Security Requirements questionnaires:

- Maintain the Information Security Requirement questionnaires with 3rd parties and adapt it when needed (excel file)
- Ensure the analysis of Information Security Requirements answers from provider in depth and validate it on all projects and due diligences request (around 50 per year)
- Ensure the review of IS Clauses in contracts and validate exceptions if the supplier does not include it in contract.
- Ensure that, for critical suppliers, ISR questionnaires are reviewed and validated in time, in accordance with our policies.

**Manage Penetration Testing Program**:

- Ensure the organization and preparation of Kick offs with the pentesters, the Application Owner and all the stakeholders needed and adapt the campaign with this information
- Ensure that all pentesters accesses and material are prepared in time, and do a follow-up on the test.
- Validate the penetration testing report with an in-depth analysis.
- Ensure the vulnerabilities remediations follow-up and the quarterly reporting to Group Security on the penetration testing tracker.
- Prepare Risk acceptance form if need with a validation in Governance Risk Committee.
- Manage vulnerabilities from Appplication security code audit tool and ensure remediations with the developers.

**Project Management Officer**:

- The team is responsible for managing the security program (Information Security, Physical Security, Operational Resilience, Health & Safety) and to deliver the projects on time, on budget and in scope. The program has stakeholders in IT infrastructure teams and also include AXA Group Security objectives and reporting.
- Ensure the monthly follow-up with Group Security, with the reporting on all deliverables and priorities.
- Help the program manager on the deliverables follow-up and reporting for AXA IM, on roadmap follow-up and arbitrations and budget.
- Help the program manager on Committee preparation and follow-up.
- Participate to the organization of security awareness

**Votre profil**:
**What profile are we looking for?**
- Education : Bac +4/5 - Engineering school or master in computer science
- Technical skills (It, Financial analysis...) : Fluent English; knowledge of information security, general computer skills
- Relational and behavioral skills: Autonomy, rigor, curiosity, teamwork.
- Any non-essential skills or experience that would be a plus: project management, cyber security

**Votre environnement de travail**:
Aimeriez-vous vous lever chaque jour motivé(e) par une mission inspirante et travailler en équipe pour permettre de protéger les personnes et leurs proches? Chez AXA nous avons l’ambition de mener la transformation de notre métier. Nous cherchons des personnes talentueuses ayant une expérience diversifiée, qui pensent différemment, et qui veulent faire partie de cette transformation passionnante en challengeant le statu quo et faire d’AXA - marque globale leader et une des sociétés les plus innovantes dans notre secteur - une entreprise encore plus performante et responsable. Dans un monde en perpétuelle évolution et avec une présence dans 64 pays, nos 166 000 salariés et distributeurs privilégiés anticipent le changement pour offrir des services et solutions adaptés aux besoins actuels et futurs de nos 103 millions de clients.

AXA Investment Managers (AXA IM) est un gestionnaire d’actifs responsable qui investit activement sur le long terme pour la prospérité de ses clients, de ses collaborateurs et de la planète. Avec environ 866 milliards d’euros d’actifs sous gestion à fin juin 2021, notre gestion de conviction nous permet d’identifier les opportunités d’investissement que nous considérons comme les meilleures du marché à l’échelle mondiale dans les différentes classes d’actifs alternatives et traditionnelles. AXA