Encryption Security Expert

Overview

As a Job title, your main objective is to

• The Encryption Security Expert is focusing on product delivery, product compliance with AXA standards, operational run and prioritization & functional consistency of the backlog.
• The role is part of the encryption product team with the responsibility to participate in daily operations for the product and ensure always quality of service at the expected level
• The Encryption Security Expert will engage with a 26 entities onboarded to the product for a scope of 300 applications encrypted by the product

Main missions

Your responsibilities include:

• Responsible for the execution of Encryption BAU Activities based in the technology Thales CipherTrust Security Manager (CTM) + Luna (HSM Technology) like for example
• Onboarding of new encryption application
• sRun the platform in terms of performance, resilience, quality and SLA require
• dRecertificate use cases offere
• dMonitor the Encryption platform regularly and remediate possible issues, incident or problems
• Manage new requests from applications' owners to onboard Encryption use case
• sManage required use cases or integrations with different AXA products/tools like no less than: Privileged Account Management, SIEM, Patching, Virtual hosts console, etc
• Support during technical sessions where activities execution plan definition or troubleshooting session
• sIdentify possible blocking points or incompatible / risky topics related to the product and its operations and propose remediation/mitigation solutions
• Support definition, study and deployment of possible new use cases/features in Encryption CTM platfor
• mOperate with usual tools / products required for the daily work like no less than: Change Management process, Incident and Request management tool, CMDB, CTM reports, etc
• Security by default: All activities both BAU or Program supporting, will be always supersede by Security policies and practices, and in specific activities will provide feedback / remediation actions for improving the level of security of the platform, like for example during a Pentest campaign
• Collaborate with entities’ security teams to ensure Cyber Defense services are delivered to the agreed Qo
• Work in close collaboration with Distributed and Cyber Defense teams to define the product roadmap and lifecycl
• eSupport AXA entities to develop plans to transition to Encryption product provided as part of Group service catalogu

Roadmap and Project Delivery

• eryParticipate in the delivery of the product roadmap and the execution of the product strategy in alignment with group security strategy and with technology lea
• ds.Communicate/explain the tactical roadmap on a regular basis to the entities and share the Encryption product strategy with t
• hemAlign with and manage the vendor relationship and governance in order to receive inputs on the next releas
• es.Support the delivery of projects related to Encryption product road
• mapSupport platform migration activities when required based on the business cont

Experience

We are looking for someone with the following experience and skil

• Field Experience in IT field > 5 y
• earsExperience in Information Security field > 5 years (advant
• age)Proven experience with Encryption products ( Vormetric technology advant
• age)Proven experience in international, multicultural and large scale enterp

Skills

• Cross cultural sensitivity, flexible, organized with a proven ability to prioritize workload, meet deadlines, and utilize time effectively
• Strong interpersonal and communication skills; able to deal effectively with diverse skill sets and personalities, works effectively as a team player
• Ability to function effectively in a matrix structure
• Strong analytical skills
• Apply analytical rigor to understand complex business scenarios
• Fluent in French and English
• Bachelor degree in Computer Science, Engineering, or related field
• Post-graduate degree in Project Management, IT or a closely-related subject

Certifications

• Certifications in Information Security domain are desirable but are not essential