CISO Health

Il y a 10 heures

Paris, Île-de-France AXA Temps plein

As a Health Chief Information Security Officer (CISO) at AXA, you will be instrumental in protecting our health customers' data and operations by defining and driving a robust information security strategy. You will leverage your expertise in healthcare data protection, regulatory compliance, and strong influencing skills to ensure our global health entities maintain a strong and resilient information security posture

About the job

Job purpose

As Health Chief Information Security Officer (CISO), your main objective is to establish, implement, and maintain a comprehensive information security program for all AXA entities providing health insurance products and healthcare services. You will be responsible for defining the information security strategy, ensuring compliance with relevant healthcare regulations, managing information security risks, and fostering a strong information security culture across the health sector. You will optimize and improve information security at both local and regional levels and represent these entities in Group Security working groups and strategic programs, operating under the mandate and authority of the Corporate CSO.

Main missions

Your responsibilities are structured around the NIST Cybersecurity Framework:

  • Govern: Develop and communicate a clear health information security vision, strategy, and risk appetite. Establish and enforce information security policies and standards in alignment with Group standards and healthcare-specific regulations (e.g., HIPAA, HDS)
  • Identify: Lead the identification, assessment, and mitigation of information security risks specific to health data, electronic health records (EHR), medical devices, and healthcare systems. Monitor the threat landscape relevant to the health insurance business
  • Protect: Oversee and guide the effective implementation of information security controls, technologies, and shared services within local entities. Ensure patient data is protected by design in all architectures
  • Detect & Respond: Ensure health entities have adequate capabilities to detect and respond to security incidents. Act as a key advisor during major security incidents involving health operations and report on status, risks, and incidents to senior leadership