Mainframe Security Lead W/M

AXA Group; Paris; Sur place; EUR 110 000 - 140 000; Plein temps

Résumé du poste

AXA Group Operations in Paris is seeking a Cyber Defense Security Designer for IBM Mainframe Z Series and iSeries to maintain and improve our security posture.

You will work with the security team to identify risks, develop remediation strategies, and contribute to the roadmap of Cyber Security products to protect AXA data and customer information.

The role demands senior IT security experience, strong communication, and the ability to operate in a matrix organization across global teams.

Qualifications

• Bachelor’s degree in computer science, IT, cybersecurity, or equivalent practical experience.
• Minimum of 8 years of IT security operations experience, specifically IBM Mainframe Z Series and iSeries.
• Extensive knowledge of RACF, zSecure, Syslog, CARLA, ICSF and related IBM Mainframe security tools.

Responsabilités

• Conduct regular security assessments of IBM Mainframe Z Series and iSeries infrastructure.
• Identify vulnerabilities and provide remediation options.
• Coordinate security incident response with relevant parties.
• Develop and maintain security controls for new systems and projects.
• Lead architecture discussions and contribute to product roadmaps.

Connaissances

Security architecture

IT security operations

Threat modeling

Risk assessment

English fluency

Security governance

Formation

Bachelor’s degree in computer science, Information Technology, Cybersecurity, or equivalent practical experience

Outils

RACF

zSecure

Syslog

CARLA

ICSF

SSO

LDAP

PKI

UNIX

AWS

Azure

Description du poste

About AXA

As a world-leading insurance company, we act for human progress by protecting what matters. With 153,000 employees in 54 countries working for 105 million customers, we’ve created a truly dynamic and vibrant community. Inclusion and diversity link closely with our values, and together we’re nurturing a culture of respect, for each other, for our customers and the communities around us. Join AXA and you’ll feel like you belong, are included and can thrive. You’ll be able to shape the way you work and truly grow your potential as you seek out new opportunities, push boundaries and benefit people in critical moments of their lives. This is your chance to build the tomorrow you want. Know you can.

About the entity

AXA is becoming a sustainable tech-led company and at AXA Group Operations we are one of the major catalysts for this transformation.

We set the tone by triggering and empowering the evolution of our insurance business model through technology and innovation, driving its concrete implementation globally at speed, with a high quality of advisory and execution.

We are present across 17 countries with committed, highly qualified teams. We leverage technology, data, sourcing, security and investment allocation in a global way, but also achieve economies of scale and synergies when necessary.

At AXA Group Operations, we want to be recognized in three fields of action:

• State-of-the-art Data Technology to drive customer experience
• State-of-the-art Procurement & Sourcing to drive efficiency and better manage risks
• High-Performing Global Team for stronger partnerships with AXA entities

Where will you be in the organization?

Security Design and Technology (SDT) improves the security of AXA by realizing the Cyber Defense security services we need to protect AXAs technology, customers, and company. We manage the architecture portfolio of these Cyber Defense products, together with the Technology Office, product managers and (product) SMEs. SDT supports Group Operations (GO) IT security in general by providing security architecture support for the integration of its security products.

The Cyber Defense solutions are based sources, and risk expertise to build a stronger and safer society. To achieve our mission, we are committed to redefining the standards of our business so that we truly differentiate ourselves and earn the trust of our key stakeholders.

As an integral part on company instructions, regulations, and business needs around the globe. It is the role of SDT to find solutions that meet the often-conflicting business requirements and mitigate the identified Cyber Risks.

SDT is a global team which currently consists of ten employees based in France, United Kingdom, and the United States.

About the job

Job purpose

As a Cyber Defense Security Designer for IBM Mainframe Z Series (and iSeries), your primary role is to maintain and improve the overall security posture of the organization's IT infrastructure that is based on IBM Mainframe Z Series (and iSeries) technology.

You will work closely with the security team and other stakeholders to identify potential security risks and develop effective remediation strategies specific to IBM Mainframe Z Series and iSeries architecture.

You will also work closely with other Cyber Defense security product specialist/teams, on the architecture, vision and roadmap of the Cyber Security Products. The goal is to protect AXAs (including customer) data adequately.

Your work consists of the following activities :

• Conduct regular security assessments of our IBM Mainframe Z Series and iSeries infrastructure and identify potential vulnerabilities that need to be addressed
• Support the distributed and entities teams with the implement and maintenance IBM Mainframe Z Series and iSeries security policies, procedures, and standards in compliance with applicable legal and regulatory requirements
• Performs periodic detailed assessments of the operating system and infrastructure components' security configuration to identify security vulnerabilities and provides remediation alternatives
• Coordinate security incident response and investigation with the relevant parties in IBM Mainframe Z Series and iSeries area
• Provide IBM Mainframe Z Series and iSeries specific security guidance and support to other teams in the organization
• Support the implementation of IBM Mainframe Z Series and iSeries-specific security controls for new systems and projects
• Contribute to IBM Mainframe Z Series-specific security awareness training for employees and contractors
• Identify potential security threats for IBM Mainframe Z Series and iSeries systems and proactively recommend and take necessary actions to mitigate those risks.
• Stay up-to‑date on the latest IBM Mainframe Z Series- and iSeries-specific security threats and trends and recommend new technical, administrative, or process changes to improve security posture
• (co) lead the product vision (5y) development of a Cyber Security product.

Main missions

Your responsibilities include :

• bringing the requirements of the Distributed/Mainframe teams, Entities, threat landscape and external regulations together in a clear plan to move ahead
• supporting IT project/products in their security risk mitigation by identifying the suitable prevention, detection and response methods
• improving the security level of the Mainframe and IBM iSeries
• improving the assigned Cyber Defense products, to keep them relevant in the threat landscape

Expected skills & experience

We are looking for someone with the following experience and skills:

Education

• Bachelor’s degree in computer science, Information Technology, Cybersecurity, or equivalent practical experience

Certification

• Relevant security certifications related to IBM Mainframe Z Series such as IBM Certified Administrator - Security z/OS, IBM Certified Specialist - z Security Technical Sales, etc., would be a plus
• Cloud Architecture qualification
• Cloud Security qualification

Overall work experience in the field

• Minimum of 8 years of experience in IT security operations, specifically related to IBM Mainframe Z Series and iSeries
• Experience with IBM Mainframe-specific security tools and technologies, such as RACF, zSecure, Syslog, CARLA,ICSF, etc
• Knowledge of IBM Mainframe Z Series-specific security standards and frameworks such as z/OS Security, RACF, zSecure, etc
• Experience with building out RACF reports in zSecure to support database authenticity
• Experience with onboarding and decommissioning applications into RACF structures.
• Extensive knowledge of SSO, Active Directory (AD), LDAP, public key infrastructure (PKI), privileged accounts, integration of application program interface (API), implementation and support of digital certificates, Kerberos, SSL, SSH
• USS experience is highly desired
• Understanding of IBM Mainframe Z Series-specific network protocols, operating systems, and virtualization technologies
• Excellent analytical and problem-solving skills for IBM Mainframe Z Series
• Strong written and verbal communication skills in providing advice, recommendations, or technical support in IBM Mainframe Z Series security
• Experience in Information Security discipline(s) > 10 years
• Experience in technical Information Security solution design > 10 years
• Hands on experience in a range of technologies e.g., Cloud, SOC, SIEM, IAM, IPS/IDS, WAF, HIPS, firewall, PUAM, Microsoft 365, Unix, Azure, Amazon Web Services, Forensics, etc. > 5 years
• Security Architecture experience, in creating and leading the security product roadmap development

Skills / abilities

• Ability to function effectively in a matrix structure
• Operate comfortably at management level
• Strong facilitation, negotiation, and conflict resolution skills
• Strong networking skills
• Team player
• Apply analytical rigor to understand complex business scenarios
• Fluent in English both spoken and written

What we offer

We bring together the expertise, cultural diversity and creativity of over 8,000 employees worldwide and we’re committed to equal opportunities in all aspects of employment (gender, LGBT+, disabled persons, or people of different origins) and to promoting Diversity & Inclusion by creating a work environment where all employees are treated with dignity and respect, and where individual differences are valued.