Vulnerability ManagementProduct Owner

AXA Group Operations; Paris; Sur place; EUR 70 000 - 90 000; Plein temps

Résumé du poste

A global insurance leader in Paris is seeking a knowledgeable Vulnerability Management Product Owner. This role involves leading a technical team, defining product strategy, and managing Agile processes to enhance cybersecurity. Candidates should have strong experience in vulnerability management and the ability to communicate effectively with stakeholders. The position offers an opportunity to contribute to critical security objectives in a collaborative environment.

Qualifications

• Proven experience in cybersecurity, especially vulnerability management and security operations.
• Demonstrable experience working as a Product Owner or in a similar Agile role.
• Strong stakeholder engagement and communication skills.

Responsabilités

• Develop and refine the product vision and strategy.
• Own and manage the product backlog.
• Lead Agile ceremonies to facilitate the team’s understanding.

Connaissances

Cybersecurity experience

Product Owner experience

Stakeholder engagement

Agile methodologies

Leadership skills

Technical communication

Formation

Post-graduate degree in IT or related field

Outils

Kenna

Tenable

Qualys

Vulcan

Hackuity

Description du poste

Join to apply for the Vulnerability Management Product Owner role at AXA Group Operations

Overview

As a key member of the Cyberdefense Product team, the Product Owner (PO) will lead a team of technical subject matter experts to define and deliver a clear product vision aligned with AXA’s security and compliance objectives. The PO acts as the primary liaison between stakeholders, security teams, and the Product Manager to ensure the product roadmap is executed effectively, delivering maximum value to AXA’s security operations and organizational goals.

Responsibilities

• Develop and refine the product vision and strategy in collaboration with the Product Manager, stakeholders, and end-users to ensure alignment with AXA’s security priorities.
• Own and manage the product backlog, prioritizing features, improvements, and technical debt based on business value, risk, and compliance requirements.
• Engage with stakeholders across security, IT, compliance, and business units to gather requirements, feedback, and ensure their needs are reflected in the product backlog.
• Lead Agile ceremonies (daily standup, sprint planning, reviews, retrospectives) to facilitate the team’s understanding of priorities and deliverables, with support from the SCRUM Master.
• Define clear acceptance criteria for deliverables and validate outputs against business needs, compliance standards, and security requirements.
• Support the Product Manager by translating strategic goals into actionable backlog items and ensuring their timely delivery.
• Promote transparency by providing regular updates on progress, risks, and dependencies to all relevant stakeholders.
• Foster team collaboration and motivate a team of technical SMEs to deliver high-quality outputs, removing blockers and facilitating continuous improvement.
• Enhance product understanding within the team and among stakeholders to ensure technical and security considerations are incorporated into prioritization decisions.
• Measure and analyze product performance using KPIs, trends, and feedback to inform ongoing improvements.
• Advocate for the product internally and externally, promoting its value and outlining future roadmap initiatives.

Team structure

The team is led by one Product Manager, with 4 FTE for LOA (run) activity and about 3–6 people on dedicated strategic projects. We are looking for a team member to support the Cyberdefense Product Manager as Product Owner. Our target is to stay at the state of the art of security while helping the team become more agile.

Expected Skills & Experience

• Proven experience in cybersecurity, especially vulnerability management and security operations.
• Demonstrable experience working as a Product Owner or in a similar Agile role, managing product backlogs and executing roadmaps.
• Ability to understand technical security concepts sufficiently to prioritize features and communicate effectively with technical teams.
• Strong stakeholder engagement and communication skills, with a proven ability to translate business needs into technical priorities.
• Leadership qualities to guide and motivate a team of technical SMEs in a fast-paced environment.
• Familiarity with security tools (e.g., Kenna, Tenable, Qualys, Vulcan, Hackuity, etc.), frameworks, and industry standards (CIS benchmarks, NIST, NIS2) relevant to vulnerability management is advantageous.
• Agile certifications (e.g., PSPO, CSPO) are highly desirable.
• Fluency in English is required; additional language skills are a plus.

Education

• Post-graduate degree in IT or a closely-related subject to IS Security.

Certification

• AGILE certifications are highly desirable (Product Owner, or other SCRUM/SAFE certifications).
• ISC² CISSP (Certified Information Systems Security Professional) or CCSP (Certified Cloud Security Professional) is recommended.

Overall Work Experience In The Fields

• Experience in AGILE hands-on experience (required).
• Experience in Team leadership (required).
• Experience in Security > 3 years (strongly recommended).

Language

• Fluency in English is required; additional language skills are a plus.

What We Offer

We bring together the expertise, cultural diversity and creativity of over 8,000 employees worldwide and we’re committed to equal opportunities in all aspects of employment (gender, LGBT+, disabled persons, or people of different origins) and to promoting Diversity & Inclusion by creating a work environment where all employees are treated with dignity and respect, and where individual differences are valued.

Job details

• Seniority level: Not Applicable
• Employment type: Full-time
• Job function: Product Management and Marketing
• Industries: IT Services and IT Consulting