Strategic Health Information Security Leader (CISO)

AXA; Paris; On-site; EUR 140,000 - 220,000; Full time

Job summary

AXA is seeking a Health Chief Information Security Officer (CISO) to define and lead a comprehensive information security program across health entities in Europe and internationally. This role focuses on health data protection, regulatory compliance, and risk management to ensure a strong security posture.

You will collaborate with Group Security, influence budgets for health initiatives, and drive a culture of security awareness while aligning with the Corporate CSO’s mandate.

Qualifications

• More than 10 years of progressive experience in Information Security, with at least 5 years in a senior leadership role focused on strategy and influence.
• Healthcare security experience with knowledge of health data protection and relevant compliance rules.
• Experience in an international and multi-cultural environment is an advantage.

Responsibilities

• Define the health information security strategy and maintain a comprehensive program across AXA health entities.
• Lead governance, risk assessment, and security controls in line with healthcare regulations and Group standards.
• Oversee incident readiness and response for health operations and report to senior leadership.
• Influence budget and direction for health security programs and foster security awareness across entities.

Skills

Information Security Strategy

Leadership

Regulatory Compliance

Stakeholder Influence

Communication

Education

Bachelor's or Master's degree in Computer Science / Information Security

Tools

NIST

ISO 27001

HIPAA Knowledge

Job description

AXA is seeking a Health Chief Information Security Officer (CISO) to define and lead a comprehensive information security program across health entities in Europe and internationally. This role focuses on health data protection, regulatory compliance, and risk management to ensure a strong security posture.

You will collaborate with Group Security, influence budgets for health initiatives, and drive a culture of security awareness while aligning with the Corporate CSO’s mandate.