Job description

Company culture :

Axa Services Maroc operates within a strongly collaborative culture, where people, trust, and high-quality professional relationships are central. The company promotes close and supportive management, encouraging accountability, development, and teamwork. This human-centered environment is reinforced by robust organizational practices that ensure reliability and operational efficiency. It is balanced by a performance-oriented mindset and a measured openness to innovation, supporting collective success.

Reporting to the CSO Manager of AXA France, your main mission is to:

• Participate in defining the converged security strategy for AXA France and its subsidiaries, in line with the Group's vision.
• Implement and manage the ISMS which ensures the security maintenance of AXA France.
• Define and implement security control plans, and define the associated remediation plans, for AXA France and its subsidiaries.
• Define and maintain security dashboards to manage our risk profile.
   

As such:

• Key Roles and Contributions:

- Assist the CSO in defining the overall security strategy for AXA France and its subsidiaries, considering group directions, based on a risk-oriented approach;
- Be responsible for implementing the ISMS of AXA France;
- Take charge of acculturating/raising awareness among AXA France staff about security issues and best practices;
- Define and implement a second-line control plan for AXA France and its subsidiaries, based on risks, including a control plan for Third Parties;
- Take charge of defining, implementing, and maintaining a security dashboard to manage the risk profile of AXA France and its subsidiaries;
- Represent the CSO when needed;
- Participate in industry groups for technological watch and promotion of AXA France;
- Perform any tasks requested by management within the scope of the department's responsibilities.

• Nature of Challenges and / or Problems to Solve:

- Manage the converged security control plan in light of new threats, and with a view to simplifying controls;
- Support entities within its perimeter in their growth curve regarding information security;
- Establish a smooth process between the 1st and 2nd lines, ensuring the security maintenance of AXA France and its subsidiaries;
- Champion security issues in risk committees.

• Manager Support:
- Know how to identify malfunctions and propose and/or implement corrective measures;
- Know how to integrate changes and gain the commitment of department members.

Reference Education:

Bachelor's degree (Bac+4/5) in Computer Science, Cybersecurity, Risk Management, Audit, or Information Systems.

Engineering school diploma, University degree, or specialized Master's in cybersecurity, information system security, risk management, or audit.

Appreciated Certifications:

CISSP
CISA
CRISC
ISO 27001 Lead Auditor or Lead Implementer
ISO 27005 (Risk Management)

Professional Experience:

Minimum 2 to 4 years in cybersecurity, IT risk management, IS audit, internal control, or ISM governance.

Experience in implementing an ISMS and/or in security control measures.