Security Consultant, Information Security

AXA Group; Ipswich; On-site; GBP 50,000 - 70,000; Full time

Job summary

A global insurance company in Ipswich is seeking a Security Consultant to provide security expertise and support to various business programs. You will work closely with project managers, perform risk assessments, and ensure security governance is maintained. The ideal candidate will have a degree in a related field, experience in Information Security risk assessments, and strong skills in an Agile environment. This role is on-site for 3 days a week, with a focus on driving security in diverse projects.

Responsibilities

• Provide security expertise and support for business partners.
• Guide project managers through the security due diligence process.
• Perform risk assessments of current products and initiatives.
• Raise awareness of security activities and manage governance.
• Consult on security policy, standards, and solutions.
• Conduct meetings with stakeholders for reviews and updates.
• Engage with business partners to understand security requirements.
• Review project security requirements to support project lifecycle.
• Facilitate the development of Risk Acknowledgement and Mitigation Plans.

Skills

Bachelor’s degree in computer science, Engineering, or related field

Excellent knowledge of working within an Agile Framework such as SAFe

Advanced knowledge of working in a DevSecOps environment

Knowledge of performing project risk assessments

Experience in performing Information Security technical risk assessments

Proficient in information security risk and governance frameworks (ISO 27005, EBIOS)

Expert analytical and reporting skills

Expert in Microsoft Office (Word, Excel, PowerPoint, Access)

Ability to effectively communicate and positively influence diverse stakeholders

Excellent attention to detail

Information Security certification (CISSP, CISM or equivalent)

Experience in articulating IS risks in business language

Experience in information security management reporting

Experience in multinational companies

Job description

Security Consultant, Information Security

Onshore (UK) 3 days on site in Ipswich

The role will be to provide security expertise to programs as well as AXA XL sub-entities. You will provide dedicated support and security related technical expertise to your respective business partners to enable the business to deliver safe and secure services.

The role will involve working with key business partners and project managers to understand and guide them through the security due diligence process. This includes performing risk assessments of current product increments, provide guidance and acquire outcomes / decisions from the project managers, enterprise architect, technical architect, solutions architect, data privacy officer, portfolio management office, strategic change development, IT Infrastructure and Operations and penetration testers. This role entails supporting existing relationships, ensuring business partners are kept up to date with security initiatives, whilst supporting them to implement good security.

DISCOVERyour opportunity

The Security Consultant will work under the responsibility and report into the Senior Program Manager. The responsibilities of the role will include the following :

• Partnering with AXA XL business units including Innovation and Data Analytics, AXA XL Re-Insurance and others to ensure security is managed effectively.
• Manage governance to support these activities.
• Raise awareness of all security activities with understanding of risk impact and reporting.
• Providing Information Security consultancy including advice for; projects, solution design, audit / assurance and application of security policy, standards, regulation, and good practice.
• Ensure ad-hoc review meetings with stakeholders take place, as needed.
• Supporting the assessment and interpretation of risk, recommending risk treatment options, tracking, and supporting remediation or acceptance.
• Develop and maintain relationship with business partners to proactively engage and understand plans and to ensure security requirements are considered.
• Review of in-scope project security requirements and evidence provided by the project manager or scrum master to support closure of Secure Project Lifecycle processes where the business units require support.
• Liaise between business units to support development of Risk Acknowledgement and Mitigation Plans (RAMPs).

SHARE your talent

We’re looking for someone who has these abilities and skills :

• Bachelor’s degree in computer science, Engineering, or related field
• Excellent knowledge of working within an Agile Framework such as SAFe
• Advanced knowledge of working in a DevSecOps environment
• Knowledge of performing project risk assessments
• Experience in performing Information Security technical risk assessments
• Proficient in information security risk and governance frameworks (ISO 27005, EBIOS)
• Expert analytical and reporting skills
• Expert in Microsoft Office (Word, Excel, PowerPoint, Access)
• Ability to effectively communicate and positively influence diverse stakeholders and team members.
• Excellent attention to detail and the ability to create clear, concise, and engaging presentations
• Information Security certification (CISSP, CISM or equivalent)
• Experience in articulating IS risks in business language and advising on the appropriate risk management action
• Experience in information security management reporting and related methodologies
• Experience in multinational companies

FIND your future

AXA XL, the P&C and specialty risk division of AXA, is known for solving complex risks. For mid-sized companies, multinationals and even some inspirational individuals we don’t just provide re / insurance, we reinvent it.

How? By combining a comprehensive and efficient capital platform, data-driven insights, leading technology, and the best talent in an agile and inclusive workspace, empowered to deliver top client service across all our lines of business − property, casualty, professional, financial lines and specialty.

With an innovative and flexible approach to risk solutions, we partner with those who move the world forward.

Inclusion & Diversity