Ensure IT Risk Strategy, Risk Appetite and action plans are formulated/ implemented to meet AXA Group and NIST IT requirements/expectations which includes formulating frameworks for Technology Risk Management, Cloud Risk Management and Cyber Resiliency.
Identify and analyze risks and recommend appropriate mitigation options.
Escalate the need to change practices to mitigate critical risks and ensure legal and regulatory compliance.
Reviewing business cases and budget submissions to ensure that information security requirements are addressed and adequately resourced.
Propose continuous improvement processes and activities to ensure quality and relevance of information security practices.
Defining and implementing performance metrics to evaluate the effectiveness of information security programs.
Monitor and maintain system confidentiality, integrity and availability and manage information security crisis/incidents.