Internship - Cyber Resilience - Ransomware Response

Référence de l’offre
230001KF

Type de contrat
Stage

Niveau d'expérience
Etudiants

Société du groupe
AXA Group Operations

Famille métier
IT, Data & Transformation

Localisation
PARIS, Paris

**Votre rôle et vos missions**:
EXPRESS YOURSELF

AXA’s mission is to “empower people to live a better life”. We want to make the change from being a payer to a partner. Our **_Group Operations (GO) _**division’s mission is to support all of AXA’s teams and empower them to take on responsibility in order to achieve this shared ambition.

To achieve this goal, innovation and execution are our key drivers. They guide all of _GO’s_ teams each day:

- **Innovation**: creating and providing the foundations and opportunities for AXA’s teams who will develop innovative solutions to meet the needs of our current and future customers;
- **Execution**: creating the environment that will enable our teams around the world to bring their ideas to life and deliver on the promises made to our customers.

Specifically, we aim to:

- Further strengthen value creation for the entire AXA Group;
- Support and encourage innovation within AXA, collaborating with the _Group Business Innovation _division;
- Automate and integrate simplicity into our day-to-day work, while ensuring we effectively contribute to AXA’s mission and strategy.

The Group Operations teams include:

- **_GTO and Group CIO_**: define AXA’s global IT strategy; promotes the convergence of IT within the entities and provide them with shared services;
- **_Group Security_**: protects our employees, our stakeholders and the AXA brand by securing information and managing cybersecurity, physical security and operational resiliency;
- **_Group Emerging Technologies and Data_**: defines the Group’s data maturity ambitions; builds and manages the community; coordinates research and expertise; supports the less mature entities in terms of data; identifies market-leading technologies and develops disruptive technologies for the entities; creates use cases for specific technologies with the entities;
- **_Group Procurement_**: defines AXA’s procurement strategy, guidelines and Group standards; manages relations with our strategic suppliers and accelerates business purchases;
- **_Group Strategic Program Management_**: ensures the consistency of global projects with the Group’s strategy; oversees the implementation and performance of strategic projects;
- **_AXA GOBO_**: offers shared services aligned with AXA’s business priorities;
**_Group Operations Transformation_**: accelerates the agile transformation within _Group Operations_; defines and implements a shared HR strategy and communications for our

YOUR FUTURE CONTRIBUTION

With Group Operations, AXA has launched a new global transversal Ransomware Response Readiness Program to develop its Cyber Resilience. The objective is to be ready if AXA gets hit by a ransomware attack, to limit the impact to the business by ensuring a fast containment of the attack, the eradication of the threat and the restoration of the IT operations.

More specifically:

- An upfront analysis of ransomware attack scenarios risks and the associated detailed procedures to support the prompt identification of weaknesses exploited by cyber criminals and “backdoors”
- The technical ability to fast isolate affected portions of our infrastructure through “isolation buttons” to stop the attack from spreading
- The definition of a decision-making protocol with clear roles and responsibilities, key alert & escalation and communications processes
- The safe recovery from the attack through a methodical eradication approach of the malware and a “massive restoration” on our key IT platforms
- A sustainable operating model to continuously test and exercise with all the key stakeholders (incl. entities) the end-to-end containment, eradication and restoration plans

The PMO trainee will report directly to the AXA Program Director.

MISSIONS
Overall coordination of the Program team efforts to secure the OTOBOSOQ* delivery:

- Contribute to the maintenance of the Program roadmap and associated projects planning
- Track projects execution Vs the baseline plan and key milestones
- Follow Program execution KPIs
- Contribute to the preparation of major governance meetings
- Consolidate Program execution risks and associated mitigation plan
- Knowledge Management: common principles and tooling to manage the Program documentation
- Program communication plan and execution
- Overall financial follow-up

Ownership of specific projects
- With time and depending on the level of autonomy and availably, take direct ownership of some deliverables in the Program to get the opportunity deep dive more into the content. For instance (but to be defined together), running a study on a potential new tool / solution, the organisation of a large event, the definition of a target operating modelThe idea is to demonstrate the end-to-end ownersh