Apprenticeship - Information Risk and Program Analyst - (M/F)

Job description

*

Notre métier, protéger les personnes, les biens et les actifs.
Notre raison d’être, agir pour le progrès humain en protégeant ce qui compte.
Cela vous parle ? Alors venez rejoindre 149 000 futurs collègues qui s’engagent au quotidien auprès de nos 95 millions de clients dans 50 pays à travers le monde.

Votre environnement de travail

Le siège social du Groupe AXA (GIE AXA) regroupe nos activités corporate. Il assure le pilotage et le support des filiales dans le monde, afin de garantir notamment la coordination et le suivi de la stratégie globale d’AXA, l’application de ses standards, la cohérence des approches commerciales, et le partage des meilleures pratiques.

Le siège est composé d’environ 1000 employés et se distingue par sa forte culture internationale (45 nationalités), ce qui en fait un espace de travail riche et stimulant.

C’est autour de la diversité et de l’unité que se construit AXA, c’est pourquoi nous nous engageons à promouvoir le succès collectif par l’inclusion.

Within the Group, you will join the Group Risk Management department.

In the context of growing cybersecurity threats and global information risks, regulators require AXA to get a solid second line of defense to ensure the overall risks are adequately managed and that risk appetite is mastered in that respect. Although protection of information is a shared responsibility of all AXA entities, including all AXA employees, agents, and advisors, GRM has set a specific department to guide and control AXA in this effort: Group Information Risk Management (GIRM) is responsible for leading the enterprise's approach for managing existing and emerging risks associated with the stewardship of AXA information*.

*Information relates to Data (data as valuable assets: data flows, data management), Information Systems (“IS” comprising architecture, applications and their infrastructure, organization, staffing, security, transformation…) and related technological innovation (R&D, PoC, AI, IoT…).

Within this Department, you will be part of the team Group Information Risk Management.

The “Information Risk, Anticipate and Report” team allows the oversight of the risk management processes from end-to-end (from identification to mitigation and monitoring): through the setting and animation of an Information Risk Management framework, it defines and challenges the expected level of controls to be implemented by the AXA entities, as well as it regularly reports to the Group stakeholders about the level of residual risks from the ground, to generate, drive and follow-up good risk-based decisions. In addition, when a financial institution relies upon third parties to provide operational services, they also rely on those service providers to have sufficient recovery capabilities for the specific services they perform on behalf of the financial institution: therefore, an effective vendor risk management helps to identify, measure, monitor, and mitigate the risks associated with outsourcing.

Vos missions

• Participate to develop and maintain the Information Risk Framework.
  • Support its implementation and maintenance at corporate and entity level:
  • Develop and maintain the quantitative models on IT risks (cyber-attack leading to data theft, cloud outage, infrastructure failure…) in coordination with Group Operational Risk team and other corporate stakeholders.
  • Participate to improve the incidents monitoring and the quality of service at corporate and entity level.
  • Participate to develop, automatize and maintain the Key Risk Indicators Dashboard on Information Risks.
• Participate to develop and maintain the global vendor risk management framework in coordination with corporate stakeholders (i.e. Group Procurement and Group COO teams)
  • Support its implementation and maintenance at corporate center and entity level.
  • Participate to animate and drive the Vendor Risk Management Community ensuring information and decision are shared.
• Participate to develop and maintain the Group internal control framework on Technology, Data Management and Procurement macro-processes and to the integration of internal control in the Group and local business processes, on a risk-based approach
  • Support its implementation and maintenance at corporate and entity level.
• Participate to animate and support the Information Risk Management Community ensuring information and decision are shared.
  • Provide support and assistance to business and entities in support of both Information risk and vendor risk activities and controls
  • Ensure risk issue escalation and management are defined, efficient and aligned with AXA Group risk appetite framework
  • Maintain an active and shared awareness of both Information risk and vendor risk industry best practices and regulatory developments

Desired profile

Qualifications :

Compétences techniques et professionnelles requises, niveau d'expérience :

·  Knowledge of IT system and processes,
·  Project management skills,
·  Understanding of information risk, vendor risk and operational risk management and mitigation controls.
·  Ability to work in and contribute to a team-oriented and collaborative environment
·  Looking for an apprenticeship in Risk Management, Finance or information Systems field in order to validate a bachelor or master’s degree.

Compétences non-techniques :

·  Good communication and presentation skills.
·  Good level in English
·  Rigorous
·  Proactive
·  Internship experience, preferably in Financial Services industry, including risk management experience.
·  Experience in managing relationships.