The ITSCM Expert contributes to the development and implementation of the end-to-end strategic approach to Operational Resilience including governance, oversight of Operational Resilience activity.
This role involves ensuring that IT services can be recovered and resumed in a timely manner following a disruption, thereby minimizing the impact on business operations.
Your responsibilities include:
- Support the GO Security Oversight Executive Manager & the GO Security Oversight Operational Resilience Lead in aligning all IT Service Continuity Management (ITSCM) & IT Resilience (ITR) planning, initiatives, and goals with Group guidelines and regulatory requirements as DORA.
- Develop and maintain the IT Service Continuity Management (ITSCM) & IT Resilience (ITR) and methodology as part of the Operational Resilience Management System
- Establish operational resilience requirements and guidelines for consumption by wide audiences and provide training to Local Operational Resilience teams.
- Review business impact analyses to identify critical IT services and potential threats.
- Collaborate, Support and Oversee IT Service Continuity Plans (ITS Continuity Plans) to ensure the recovery and continuity of IT services.
- Regularly review and update continuity plans based on test results to ensure the effectiveness of the ITS Continuity plans and changing business requirements.
- Collaborate, Support and Oversee Local Operational Resilience teams of AXA Group Operations in the diverse activities including but not limited to yearly DR Test campaign, ITSCM & ITR Strategy (Backup/Restore, Fast Isolation), status of ITSCM activities and overall readiness of IT services.
- Prepare and facilitate awareness and training programs and sessions to wide audiences .
- Monitor and assess the effectiveness of ITSCM activities and make recommendations for continuous improvement.
- Provide visibility and report to the Security Oversight Executive Manager & the Security Oversight Operational Resilience Lead on the overall Operational Resilience Program .
- Contribute to the remediation of audit issues on Operational Resilience perimeter.
Expected skills & experience-
We are looking for someone with the following experience and skills:
Experience
- University degree in Security or IT.
- Operational Resilience industry certification (ISO 22301 Lead Implementer / Lead Auditor or equivalent) strongly recommended.
- Experience > 5 years.
- Strong experience in Operational Resilience Management Systems.
- Experience of working on ISO27001/2 and/or related security standards is a plus.
- Experience working in Regulatory requirements related to Operational Resilience (GDPR, DORA) is a plus.
- Experience working in Financial Services sector preferred.
Technical skills
- Proficiency in IT Service Continuity Management (ITSCM) & IT Resilience (ITR) standards, good practices & tools.
- Business Continuity Management (BCM) and in Incident & Crisis management (I&CM standards knowledge is a plus.
- Strong understanding of risk management principles.
Soft skills / transversal skills
- Ability to effectively operate in a decentralized and political corporate environment.
- Ability to function effectively in a matrix structure.
- Strong communication skills to collaborate and interact with various stakeholders.
- Excellent time management skills (tight deadlines).
- Ability to prioritize activities and to manage action plans, review progress and adjust where required.
- Good analytical skills and the ability to clearly identify key issues.
- Ability to recommend solutions relevant to the complexity, scope, risk and magnitude of problems impacting the service level.
- Fluency in English is a necessity.
- Fluency in French is an advantage.
Notice period - Immediate to 30 days only