Information Security Officer (CISO support)

About the role

Yuzzu, an insurance broker within the AXA Group, is looking for a Confirmed Information Security Officer to support the Chief Security Officer. You will help shape and maintain the company’s security posture, ensuring compliance with AXA group standards and industry best practices.

Key responsibilities

• Assist the CSO in developing, implementing and supporting information security activities aligned with ISO 27001 and NIST frameworks.
• Oversee governance of security tasks performed by internal and external stakeholders.
• Support physical security, business continuity and operational resilience initiatives.
• Conduct quarterly KPI reporting on security controls and manage recurring tasks such as access recertification, vulnerability assessments, infrastructure inventory, and penetration‑test coordination.
• Identify security vulnerabilities, propose counter‑measures and promote security best practices in IT projects and third‑party contracts.
• Ensure continuous improvement and preparation for annual security assessments.

Required profile

• Degree in computer science, engineering or equivalent professional experience.
• Minimum 5 years of experience in information security, preferably within the financial sector.
• Strong understanding of security across network, system, application and cloud layers.

Required skills

• ISO 27001 and NIST standards knowledge.
• Security certifications such as CISSP, ISO 27001 Lead Auditor/Implementer, CISA, CISM, SANS, ITIL.
• Vulnerability assessment and penetration‑testing coordination.
• Security policy and procedure development.
• Access recertification and security governance.
• KPI reporting and security metrics analysis.

What we offer

• A dynamic, agile team environment within a growing insurance brokerage.
• Opportunities to work on diverse security projects and influence company‑wide security strategy.