Security Risk & Reporting Manager

AXA UK; Bristol; Hybrid; GBP 55,000 - 70,000; Full time

Job summary

An established industry player is seeking a Security Risk & Reporting Manager to enhance their Business, Security and Oversight team. This role is crucial for delivering security assurance activities and managing audits while supporting security risk management from identification to remediation. With a flexible working environment, you will be empowered to balance home and office work, transitioning to primarily remote work by 2025. The ideal candidate will possess extensive risk and information security experience and relevant certifications, ensuring effective communication and collaboration with stakeholders. Join this dynamic team and make a significant impact on security management.

Benefits

Performance Bonuses

Pension Contributions

Life Assurance

Generous Leave

Flexible Working

Qualifications

• Extensive experience in risk and information security within large organizations.
• Strong understanding of security risk management processes.

Responsibilities

• Develop annual roadmaps for reporting and audits.
• Manage internal and external audits efficiently.
• Support security risk identification and assessment.

Skills

Risk Management

Information Security

Stakeholder Communication

Audit Coordination

Planning and Organization

Education

CRISC Certification

CISM Certification

CISSP Certification

ISO27001 Lead Implementer/Auditor

Tools

CIS Benchmarks

Job description

Join to apply for the Security Risk & Reporting Manager role at AXA UK

Job Overview

We have a new opportunity for a Security, Risk and Reporting Manager to join our Business, Security and Oversight team. This pivotal role involves delivering security assurance activities, managing internal and external audits, and supporting security risk management from identification through to remediation.

Work Environment

At AXA, we promote flexible working, empowering our employees to balance home and office work. You will work at least 40% remotely, with a transition to primarily remote work from September 2025. 'Away from home' includes office visits, client visits, or industry events.

Key Responsibilities

1. Develop annual roadmaps for group reporting and audits.
2. Collaborate with stakeholders to gather information on security risks, controls, and remediation plans.
3. Communicate control gaps, deficiencies, and risk profile changes to management and the second line of defense.
4. Produce MI and reports for security assurance steering groups and committees.
5. Coordinate and manage internal and external audits efficiently.
6. Support security risk identification, assessment, and monitoring.
7. Track audit findings and ensure remediation in partnership with control owners.
8. Assist in internal and external control assurance activities, liaising with third-party vendors as needed.

Candidate Profile

• Extensive risk and information security experience in a large organization.
• Preferred certifications: CRISC, CISM, CISSP, ISO27001 Lead Implementer/Auditor, or equivalent.
• Strong understanding of Information Security and Security Risk.
• Knowledge of business processes, applications, or technologies such as networks and infrastructure.
• Excellent planning and organizational skills.
• Ability to communicate effectively with technical and non-technical stakeholders.
• High confidentiality standards, even under pressure.
• Flexible and adaptable to additional duties as required.
• Understanding of CIS benchmarks is desirable.

Additional Information

Applicants must be eligible and authorized to work in the UK. The role offers a competitive salary of up to £70,000, performance bonuses, pension contributions, life assurance, generous leave, and other benefits.

Application Process

To apply, click 'apply for this job' and submit your CV after logging in or creating a profile. We are an equal opportunities employer and offer support for candidates with disabilities through our Accessibility Concierge. For assistance, contact [e-mail].

About AXA UK

AXA UK Support Functions provide infrastructure, support, and expertise to our customer-facing units, fostering growth and development for all employees.