Information Risk

Référence de l’offre
230001LX

Type de contrat
CDI

Niveau d'expérience
Expérimentés

Société du groupeGIE AXA

Famille métierFinance et stratégie

Localisation
PUTEAUX, Hauts-de-Seine

**Votre rôle et vos missions**:
The AXA Group, world leader in Financial Protection, supports and advises its individual and corporate customers at every life stage, providing them with the products and services that meet their insurance, personal protection, savings and wealth management needs.
Our areas of expertise are reflected in a range of products and services adapted to the needs of each client in three major business lines: property-casualty insurance, life & savings, and asset management.
In 2021 we are present in 54 countries, with 153,000 employees and distributors of AXA who are committed to serving our 105 million clients.
AXA Corporate Center’s main missions are to:

- Steer the entities in order to ensure the coherence of the strategies, the consistency of the commercial approaches as well as the optimization of the risks and results;
- Defining and coordinating Group policies, different transversal projects and standards, identifying and sharing best practices;
- Supporting the entities in order to help them to grow, to develop their offer, their management and steering standards as well as their risk management.

The head office of AXA Group (GIE AXA), based in La Défense Majunga, gathers the Group's corporate activities. It coordinates the various entities according to the Group's strategy and is responsible for managing international projects. The headquarters is composed with over 850 employees and is distinguished by its strong international culture (45 nationalities).

**WHAT INFORMATION RISK MANAGEMENT BRINGS TO AXA**:
In the context of growing cybersecurity threats and global information risks, regulators require AXA to get a solid second line of defense to ensure the overall risks are adequately managed and that risk appetite is mastered in that respect. Although protection of information is a shared responsibility of all AXA entities, including all AXA employees, agents, and advisors, Group Risk Management has a dedicated department to guiding and supervising AXA in this effort: Group Information Risk Management (GIRM) is responsible for leading the organization’s approach for managing existing and emerging risks associated with the stewardship of AXAs information.

Information Risk is the risk that AXA’s information or information systems fail to deliver the expected value to the organization, impacting business objectives or creating unacceptable operational loss. It includes any data systems, networks, and the supporting resources (incl. budget, people, premises, security) that process it.

The Information Risk Advisory team’s main objective is to ensure that AXA Chief Risk Officers have the means to effectively oversee Information Risk and present a second opinion on key decisions. We achieve this through documented reviews of projects, initiatives, and key risks; through participation to executive committees; by partnering with Technology and Security teams and by advising and training CRO teams.

**HOW YOU WILL CONTRIBUTE TO CREATING VALUE FOR THE WHOLE ORGANIZATION**:
The main purposes of the position are to:

- Oversee allocated topics / projects to ensure that risks are being managed: attending steering committees, advising Technology / Security colleagues and reviewing proposals;
- Deliver second opinion: Initial research on topic, structure the study, conduct interviews with entities and central functions, write report and present to Risk community; and
- Ad-hoc advisory; respond to ad-hoc requests for a risk analysis.

**Core activities**:

- Perform second opinion reviews
- Contribute to define the second opinion review scope;
- Analyze projects, activities, organizations and processes to identify risks;
- Conduct interviews of the main stakeholders;
- Define a verification program to assess effectiveness of controls and risk coverage;
- Write second opinion reports highlighting concerns and providing requirements and recommendations;
- Present the outcome of the reviews to senior management; and
- Follow-up of the remediation actions for the concerns raised in the second opinions (recommendations and/or requirements):

- Based on your expertise and experience, convince operational management and risk management by sharing his/her opinion and its arguments / evidences on projects through assurance or specific governances;
- As an influencer and advisor, assist entities in implementing a local second opinion process; and
- As a Group Risk Management team member, contribute to maintain the Group internal control framework on Technology, Data Management and Procurement macro-processes and to animate the Information Risk Management Community:

- Provide support and assistance to business and entities in support of both Information risk and vendor risk framework, contro