Vulnerability Management Product Owner

AXA Group Operations; Paris; On-site; EUR 60,000 - 80,000; Full time

Job summary

A leading insurance company in Paris is seeking a Vulnerability Management Product Owner to lead a team in defining product vision aligned with security objectives. The ideal candidate will have extensive experience in cybersecurity, strong stakeholder engagement skills, and a proven background as a Product Owner in an Agile environment. This is a full-time role offering the opportunity to work in a dynamic environment focused on security operations.

Qualifications

• Experience in vulnerability management and security operations.
• Demonstrable experience in an Agile role as a Product Owner.
• Ability to communicate technical security concepts.

Responsibilities

• Define and deliver a product vision aligned with security objectives.
• Own and manage product backlog prioritizing features and improvements.
• Lead Agile ceremonies with the team.

Skills

Cybersecurity experience

Product Owner experience

Stakeholder engagement

Leadership

Security tools familiarity

Agile knowledge

Fluency in English

Education

Post-graduate degree in IT or IS Security

Tools

Kenna

Tenable

Qualys

Vulcan

Hackuity

Job description

Join to apply for the Vulnerability Management Product Owner role at AXA Group Operations

The Product Owner will lead a team of technical subject matter experts to define and deliver a clear product vision aligned with AXA’s security and compliance objectives. The PO acts as the primary liaison between stakeholders, security teams, and the Product Manager to ensure the product roadmap is executed effectively, delivering maximum value to AXA’s security operations and organizational goals.

• Develop and refine the product vision and strategy in collaboration with the Product Manager, stakeholders, and end-users to ensure alignment with AXA’s security priorities.
• Own and manage the product backlog, prioritizing features, improvements, and technical debt based on business value, risk, and compliance requirements.
• Engage with stakeholders across security, IT, compliance, and business units to gather requirements, feedback, and ensure their needs are reflected in the product backlog.
• Lead Agile ceremonies (daily standup, sprint planning, reviews, retrospectives) to facilitate team understanding of priorities and deliverables with the support for the SCRUM master
• Define clear acceptance criteria for deliverables and validate outputs against business needs, compliance standards, and security requirements.
• Support the Product Manager by translating strategic goals into actionable backlog items and ensuring their timely delivery.
• Promote transparency by providing regular updates on progress, risks, and dependencies to all relevant stakeholders.
• Foster team collaboration and motivate a team of technical SMEs to deliver high-quality outputs, removing blockers and facilitating continuous improvement.
• Enhance product understanding within the team and stakeholders to ensure technical and security considerations are incorporated into prioritization decisions.
• Measure and analyze product performance using KPIs, trends, and feedback to inform ongoing improvements.
• Advocate for the product internally and externally, promoting its value and outlining future roadmap initiatives.

Team structure: The team is led by one Product manager, and 4 people (FTE) for the LOA (run) activity and about 3-6 people part of the team on dedicated strategic project.

We are looking for a team member that will support Cyberdefense Product manager as Product owner role.

One of our target is to stay at the “state of art” of security while helping the team to be more agile.

We are looking for someone with the following experience and skills:

Skills and Experience

• Proven experience in cybersecurity, especially vulnerability management and security operations.
• Demonstrable experience working as a Product Owner or in a similar Agile role, managing product backlogs and executing roadmaps.
• Ability to understand technical security concepts sufficiently to prioritize features and communicate effectively with technical teams.
• Strong stakeholder engagement and communication skills, with a proven ability to translate business needs into technical priorities.
• Leadership qualities to guide and motivate a team of technical SMEs in a fast-paced environment.
• Familiarity with security tools (e.g. Kenna, Tenable, Qualys, Vulcan, Hackuity etc.), frameworks, and industry standards (CIS benchmarks, NIST, NIS2) relevant to vulnerability management is advantageous
• Agile certifications (e.g., PSPO, CSPO) are highly desirable.
• Fluency in English is required; additional language skills are a plus.

Education

• Post-graduate degree in IT or a closely-related subject to IS Security.

Certification

• AGILE certifications are highly desirable (Product Owner, or other SCRUM/SAFE certifications)
• ISC² CISSP (Certified Information Systems Security Professional) or CCSP (Certified Cloud Security Professional) is recommended

Overall work experience in the fields

• Experience in AGILE hands-on experience (required)
• Experience in Team leadership (required)
• Experience in Security > 3 years (strongly recommended)

Language

• Fluency in English is required; additional language skills are a plus.

Seniority level

• Associate

Employment type

• Full-time

Job function

• Research
• Industries
• Insurance