CISO Health

AXA; Paris; On-site; EUR 140,000 - 220,000; Full time

Job summary

AXA is seeking a Health Chief Information Security Officer (CISO) to define and lead a comprehensive information security program across health entities in Europe and internationally. This role focuses on health data protection, regulatory compliance, and risk management to ensure a strong security posture.

You will collaborate with Group Security, influence budgets for health initiatives, and drive a culture of security awareness while aligning with the Corporate CSO’s mandate.

Qualifications

• More than 10 years of progressive experience in Information Security, with at least 5 years in a senior leadership role focused on strategy and influence.
• Healthcare security experience with knowledge of health data protection and relevant compliance rules.
• Experience in an international and multi-cultural environment is an advantage.

Responsibilities

• Define the health information security strategy and maintain a comprehensive program across AXA health entities.
• Lead governance, risk assessment, and security controls in line with healthcare regulations and Group standards.
• Oversee incident readiness and response for health operations and report to senior leadership.
• Influence budget and direction for health security programs and foster security awareness across entities.

Skills

Information Security Strategy

Leadership

Regulatory Compliance

Stakeholder Influence

Communication

Education

Bachelor's or Master's degree in Computer Science / Information Security

Tools

NIST

ISO 27001

HIPAA Knowledge

Job description

As a Health Chief Information Security Officer (CISO) at AXA, you will be instrumental in protecting our health customers' data and operations by defining and driving a robust information security strategy.You will leverage your expertise in healthcare data protection, regulatory compliance, and strong influencing skills to ensure our global health entities maintain a strong and resilient information security posture

About the job

Job purpose

As Health Chief Information Security Officer (CISO), your main objective is to establish, implement, and maintain a comprehensive information security program for all AXA entities providing health insurance products and healthcare services. You will be responsible for defining the information security strategy, ensuring compliance with relevant healthcare regulations, managing information security risks, and fostering a strong information security culture across the health sector. You will optimize and improve information security at both local and regional levels and represent these entities in Group Security working groups and strategic programs, operating under the mandate and authority of the Corporate CSO.

Main missions

Your responsibilities are structured around the NIST Cybersecurity Framework:

• Govern: Develop and communicate a clear health information security vision, strategy, and risk appetite. Establish and enforce information security policies and standards in alignment with Group standards and healthcare-specific regulations (e.g., HIPAA, HDS)
• Identify: Lead the identification, assessment, and mitigation of information security risks specific to health data, electronic health records (EHR), medical devices, and healthcare systems. Monitor the threat landscape relevant to the health insurance business
• Protect: Oversee and guide the effective implementation of information security controls, technologies, and shared services within local entities. Ensure patient data is protected by design in all architectures
• Detect & Respond: Ensure health entities have adequate capabilities to detect and respond to security incidents. Act as a key advisor during major security incidents involving health operations and report on status, risks, and incidents to senior leadership
• Lead & Influence: Lead communities of Information Security Subject Matter Experts, represent health entity needs within Group Security, influence the security budget for health initiatives, and foster a strong security awareness culture

Main missions

Your responsibilities include:

Expected skills & experience

We are looking for someone with the following experience and skills:

Experience

More than 10 years of progressive experience in Information Security, with at least 5 years in a senior leadership role focused on strategy and influence.

Healthcare security experience with knowledge of health data protection and relevant compliance rules.

Experience in an international and multi-cultural environment is an advantage.

Technical skills

• Good knowledge in security risks & controls frameworks (NIST, ISO 27001)
• Experience with electronic health records and patient data protection is crucial

Soft skills / transversal skills

Profile

• Fluent in English. Outstanding oral and written communication skills with proven ability to develop and present concise information
• Strong multi-cultural understanding
• Experience of interacting with Directors and all levels of management
• Team player and able to collaborate, influence and guide others

Strategic Thinking

• Maintains a wider perspective, aligns actions and contributes to the enhancement of the overall organizational strategy, including outputs from benchmarking activities and reviews
• Understands and articulates the projected direction of the organization and how changes to it might impact the group
• Is aware of trends in the external environment and key differentiators vis‑à‑vis competition and uses this information to anticipate how these changes would impact the organization

Communication competencies

• Ability to communicate appropriately with all levels of the organization including senior executives and technical experts
• Ability to identify the right communication vehicle tailored to the subject matter and the audience
• Proven ability to present material to large audiences via conference calls using both speaking and listening skills to manage messages
• Excellent interpersonal and communication skills (written and verbal)

Transversal skills

• Strong analytical skills: analyze and critically evaluate information as well as formulate plans based on multiple sources of information
• Collaborative mind: ability to build collaborative relationships with both local contacts and group program/project stakeholders
• Adaptability: ability to recommend solutions relevant to the complexity, scope, risk and magnitude of situations
• Problem solving: be able to solve complex problems with innovative solutions across small and large organizations
• Influence: facilitation, negotiation and influencing skills to achieve results both at a group level and at entity level
• Project management: ability to manage action plans, review progress and adjust where required
• Interpersonal skills: assertiveness, empathy, listening oriented, oral communication, persuasive skills

Where will you be in the organization?

The department / team

You will be a key individual contributor responsible for driving the Information Security strategy and its implementation for AXA’s health business lines across Europe and International Market. Your responsibility will be to ensure all health-related entities remain secure and compliant from an information security perspective, leveraging strong influencing and coordination skills across various stakeholders and entities under the Corporate CSO's authority.

What we offer

We bring together the expertise, cultural diversity and creativity of over 8,000 employees worldwide and we’re committed to equal opportunities in all aspects of employment (gender, LGBT+, disabled persons, or people of different origins) and to promoting Diversity & Inclusion by creating a work environment where all employees are treated with dignity and respect, and where individual differences are valued.

About the entity

AXA is becoming a sustainable tech‑led company and at AXA Group Operations we are one of the major catalysts for this transformation.

We set the tone by triggering and empowering the evolution of our insurance business model through technology and innovation, driving its concrete implementation globally at speed, with a high quality of advisory and execution.

We are present across 17 countries with committed, highly qualified teams. We leverage technology, data, sourcing, security and investment allocation in a global way, but also achieve economies of scale and synergies when necessary.

At AXA Group Operations, we want to be recognized in three fields of action:

• State‑of‑the‑art Data Technology to drive customer experience
• State‑of‑the‑art Procurement & Sourcing to drive efficiency and better manage risks
• High‑Performing Global Team for stronger partnerships with AXA entities

About AXA

As a world‑leading insurance company, we act for human progress by protecting what matters. With 153,000 employees in 54 countries working for 105 million customers, we’ve created a truly dynamic and vibrant community. Inclusion and diversity link closely with our values, and together we’re nurturing a culture of respect, for each other, for our customers and the communities around us. Join AXA and you’ll feel like you belong, are included and can thrive. You’ll be able to shape the way you work and truly grow your potential as you seek out new opportunities, push boundaries and benefit people in critical moments of their lives. This is your chance to build the tomorrow you want. Know you can.