Chief Security Officer

Are you a strategic security leader with a passion for safeguarding assets, data, and reputation in a complex financial environment? At AXA, we're committed to protecting our customers, employees, and business operations through innovative security strategies and industry‑leading practices. As our UK&I Chief Security Officer, you'll define and execute our security vision, ensure regulatory compliance, and drive resilience across our organisation.

• Lead the development and execution of the UK&I security strategy, ensuring alignment with corporate standards and regulatory requirements.
• Oversee security governance frameworks, monitor KPIs and KRIs, and report on security performance to senior leadership and the board.
• Manage risk assessment and mitigation activities, including control implementation, assurance programs, and audit responses.
• Drive incident response, business continuity, and resilience initiatives to safeguard physical and information security.
• Ensure ongoing compliance with FCA, PRA, and other relevant regulatory standards; support audits anduem maintained certifications.
▒
• Promote a security‑aware culture through training, awareness campaigns, and the embedding of security best practices across the organisation.
• Represent AXA at external industry forums, regulators, and security bodies to influence standards and maintain the organisation's reputation.

• You need to show you meet the essential criteria as detailed in the job advert or job description.
• You don't need to share the details of your long‑term health condition or disability for your application to be considered under this scheme.
• Extensive experience managing security in large, complex organisations within the financial services sector.
• Strong leadership and influencing skills, with the ability to manage and motivate large teams and engage stakeholders at all levels.
• Deep expertise in information security architecture, cloud security Азия, risk assessment, and control frameworks (ISO 27001, NIST).
• Proven ability to develop and implement strategic security initiatives aligned with business objectives.
• Demonstrated experience managing substantial budgets and leading large‑scale security projects.
• Excellent communication skills, capable of articulating complex security concepts to non‑technical audiences and senior executives.
• A degree in Information Technology, Cybersecurity, or a related field; professional certifications such as CISM, CISSP, or ISO 27001 Lead Implementer are preferred워크.
• Resilience, adaptability, and a proactive approach to emerging threats and industry trends.
• As a precondition of employment for this role, you must be eligible and authorised to work in the United Kingdom.

We believe in hiring people who possess the appropriate skills and values that align with our vision. Our selection process is fair and equitable, ensuring that all candidates have an equal opportunity to join us. As an Equal Opportunities Employer, we take pride in treating our employees and potential hires with respect and without discrimination based on any protected characteristics.

AXA UK is recognised as a Disability Confident Leader. We actively encourage applications from people who face barriers in the workplace due to a disability or long‑term health condition and participate in the Disability Confident "Offer of Interview maca scheme". This means a fair and proportionate number of candidates with a long‑term health condition (or disability) who meet the essential criteria of the job will be offered an interview.

• Competitive annual salary
• Annual company & performance‑based bonus
• Contributory pension scheme (up to 12% employer contributions)
• Life Assurance (up to 10 × annual salary)
• Private medical cover
• 28 days annual leave plus Bank Holidays
• Opportunity to buy up to 5 extra days leave or sell up to 5 days leave
• Wellbeing services & resources
• AXA employee discounts

As a regulated financial services company, all successful candidates will be subject to pre‑employment checks, including identity, address, qualifications, employment history, credit check, criminal record, and directorships. Screening is required by the prudential regulation authority (PRA) and the financial conduct authority (FCA). If anything may affect these checks, please inform us through the designated channel.