Chief Security Officer at AXA Health

What you’ll be doing:

• Lead the development and execution of the UK&I security strategy, ensuring alignment with corporate standards and regulatory requirements.
• Oversee security governance frameworks, monitor KPIs and KRIs, and report on security performance to senior leadership and the board.
• Manage risk assessment and mitigation activities, including control implementation, assurance programs, and audit responses.
• Drive incident response, business continuity, and resilience initiatives to safeguard physical and information security.
• Ensure ongoing compliance with FCA, PRA, and other relevant regulatory standards; support audits and maintain certifications.
• Lead, motivate, and develop security teams and collaborate with Group security functions to ensure consistency and effectiveness.
• Promote a security-aware culture through training, awareness campaigns, and embedding security best practices across the organisation.
• Represent AXA at external industry forums, regulators, and security bodies to influence standards and maintain the organisation’s reputation.

Due to the number of applications we expect to receive for this role, we reserve the right to close this advert earlier than the listed closing date to ensure we’re able to effectively manage interest. Therefore, if you’re interested in joining us at AXA, please don’t hesitate to apply.

What you’ll bring:

• Extensive experience managing security in large, complex organisations, within the financial services sector.
• Strong leadership and influencing skills, with the ability to manage and motivate large teams and engage stakeholders at all levels.
• Deep expertise in information security architecture, cloud security, risk assessment, and control frameworks (ISO 27001, NIST).
• Proven ability to develop and implement strategic security initiatives aligned with business objectives.
• Demonstrated experience managing substantial budgets and leading large-scale security projects.
• Excellent communication skills, capable of articulating complex security concepts to non-technical audiences and senior executives.
• A degree in Information Technology, Cybersecurity, or a related field; professional certifications such as CISM, CISSP, or ISO 27001 Lead Implementer are preferred.
• Resilience, adaptability, and a proactive approach to emerging threats and industry trends.

As a precondition of employment for this role, you must be eligible and authorised to work in the United Kingdom.

Please be aware that this position is a Certified Function role under the SM&CR regime, which means the successful candidate will be subject to an enhanced level of background screening requirements.

What we offer:

At AXA UK, we’re appreciative of the people who work for us and our rewards package is reviewed regularly to reflect that. You can expect to receive:

• Competitive annual salary
• Annual company & performance-based bonus
• Contributory pension scheme (up to 12% employer contributions)
• Life Assurance (up to 10 x annual salary)
• Private medical cover
• 28 days annual leave plus Bank Holidays
• Opportunity to buy up to 5 extra days leave or sell up to 5 days leave
• Wellbeing services & resources
• AXA employee discounts