CDILisbon, Portugal
IT Product Senior Security Owner
Hybride
Contexte de la mission
Location: Lisbon, 2x in person per week.
Expertise: More than 7 years working expertise in Information Technology and Cloud Products
AXA Group Operations is the IT solutions and business consulting provider of the AXA Group, one of the world's leading insurance and financial protection companies.
Working for the different companies of the AXA group, AXA GO has a worldwide action field with offices in several countries across the globe.
The profile will be engaged within a team of IT professionals providing transversal services and will onboard the security and compliance control centre that pursues products alignment with Group Security standards.
Service in close collaboration with the IT Product teams and the Security Officer, with the focus on having a proactive approach towards overall security on products and leverage the posture to consider security across the product life cycle.
Objectifs et livrables
MAIN TASKS AND SCOPE OF SERVICES
Ensure, for specific Products, the security overall
Support security and compliance control centre to ensure Products compliance with Group Security standards
Work on security requirements and security controls implementation with the application teams
Methodize and support on security tests
Own security remediation plans
Provide overall security support to IT Product teams
Create and document internal processes
Methodize and drive security relevant meetings
Service Deliverables (but not limited to)
Documented security posture for specific Products, aligned with Group Security standards
Defined and maintained security requirements and security controls for the relevant applications
Security test plans, execution support and documented results
Security remediation plans, including tracking of implementation status
Documented internal security processes and procedures
Structured documentation and support materials for IT Product teams on security topics
Meeting agendas, minutes and action plans for security-relevant sessions
Required Expertise
PROFESSIONAL AND TECHNICAL SKILLS
Technical expertise:
Must Have:
Security information systems standards and frameworks (ex: ISO 2700x)
Identity and Access control
Security Assessment and Testing
Encryption methods and secure protocols
Secure Software Development Life Cycle
Vulnerability management
Azure cloud security expertise
Organizational and analytical skills for complex environments (multi-cultural / multi-country / geographically distributed teams)
Nice to have:
Data Privacy / GDPR expertise
Operational Resilience
ITIL Framework
Non-Technical (operational expectations):
Must Have:
Coordination and planning applied to security-related activities and attention to detail
Commitment to agreed scope, timelines and quality of deliverables
Results orientation in the execution of security initiatives
Structured approach and capacity to synthesize complex security information into clear documentation and outputs
EXPERTISE REQUIRED
Degree in a relevant area, such as Information Security, Computer Science
Minimum expertise in Information Technology and IS Security: 7 years
LANGUAGE
English Environment - C1 – Proficient user
Common European Framework of Reference for Languages
Discussions and exchanges in English
French Environment - will be valued
OTHER
Travel may be required depending on mission needs
Service Qualifications
The service is expected to be provided by a profile meeting the following qualifications:
Academic background in Information Security, Computer Science or equivalent
At least 7 years of expertise in Information Technology and IS Security, preferably in environments involving cloud products and large international organizations
Proven track record in applying security standards and frameworks (e.g. ISO 2700x), managing identity and access control, conducting security assessments and testing, and handling vulnerability management in Azure cloud security contexts
Capacity to operate in multi-cultural, multi-country, geographically distributed environments
English Environment at C1 level (proficient user); French Environment appreciated
Availability to support activities that may require occasional travel, in line with mission scope and project needs
Informations de la mission :
Location: Lisbon, 2x in person per week.
Expertise: More than 7 years working expertise in Information Technology and Cloud Products
AXA Group Operations is the IT solutions and business consulting provider of the AXA Group, one of the world's leading insurance and financial protection companies.
Working for the different companies of the AXA group, AXA GO has a worldwide action field with offices in several countries across the globe.
The profile will be engaged within a team of IT professionals providing transversal services and will onboard the security and compliance control centre that pursues products alignment with Group Security standards.
Service in close collaboration with the IT Product teams and the Security Officer, with the focus on having a proactive approach towards overall security on products and leverage the posture to consider security across the product life cycle.
Objectifs et livrables
MAIN TASKS AND SCOPE OF SERVICES
Ensure, for specific Products, the security overall
Support security and compliance control centre to ensure Products compliance with Group Security standards
Work on security requirements and security controls implementation with the application teams
Methodize and support on security tests
Own security remediation plans
Provide overall security support to IT Product teams
Create and document internal processes
Methodize and drive security relevant meetings
Service Deliverables (but not limited to)
Documented security posture for specific Products, aligned with Group Security standards
Defined and maintained security requirements and security controls for the relevant applications
Security test plans, execution support and documented results
Security remediation plans, including tracking of implementation status
Documented internal security processes and procedures
Structured documentation and support materials for IT Product teams on security topics
Meeting agendas, minutes and action plans for security-relevant sessions
Required Expertise
PROFESSIONAL AND TECHNICAL SKILLS
Technical expertise:
Must Have:
Security information systems standards and frameworks (ex: ISO 2700x)
Identity and Access control
Security Assessment and Testing
Encryption methods and secure protocols
Secure Software Development Life Cycle
Vulnerability management
Azure cloud security expertise
Organizational and analytical skills for complex environments (multi-cultural / multi-country / geographically distributed teams)
Nice to have:
Data Privacy / GDPR expertise
Operational Resilience
ITIL Framework
Non-Technical (operational expectations):
Must Have:
Coordination and planning applied to security-related activities and attention to detail
Commitment to agreed scope, timelines and quality of deliverables
Results orientation in the execution of security initiatives
Structured approach and capacity to synthesize complex security information into clear documentation and outputs
EXPERTISE REQUIRED
Degree in a relevant area, such as Information Security, Computer Science
Minimum expertise in Information Technology and IS Security: 7 years
LANGUAGE
English Environment - C1 – Proficient user
Common European Framework of Reference for Languages
Discussions and exchanges in English
French Environment - will be valued
OTHER
Travel may be required depending on mission needs
Service Qualifications
The service is expected to be provided by a profile meeting the following qualifications:
Academic background in Information Security, Computer Science or equivalent
At least 7 years of expertise in Information Technology and IS Security, preferably in environments involving cloud products and large international organizations
Proven track record in applying security standards and frameworks (e.g. ISO 2700x), managing identity and access control, conducting security assessments and testing, and handling vulnerability management in Azure cloud security contexts
Capacity to operate in multi-cultural, multi-country, geographically distributed environments
English Environment at C1 level (proficient user); French Environment appreciated
Availability to support activities that may require occasional travel, in line with mission scope and project needs
Informations de la mission :
- Début de mission : 19/10/2026
- Durée : 12 mois
- Date de publication : 09/10/2026
- Date limite de candidature : 23/10/2026
Compétences recherchées
Azure (Indispensable)ISO 2700x (Indispensable)Identity and Access Management (Indispensable)Encryption (Indispensable)Secure SDLC (Indispensable)Vulnerability management (Indispensable)Security testing (Indispensable)GDPR (Indispensable)ITIL (Indispensable)Identity and Access control (Indispensable)Security Assessment and Testing (Indispensable)Encryption methods and secure protocols (Indispensable)Secure Software Development Life Cycle (Indispensable)Azure cloud security (Indispensable)Data Privacy/GDPR (Apprécié)Operational Resilience (Apprécié)
Intéressé(e) ?
Rejoignez l'équipe et participez à nos projets ambitieux.