IT Product Senior Security Owner

About the Position

We are looking for an IT Product Senior Security Owner to join a team of IT professionals providing transversal services within a large international insurance group. The profile will join the security and compliance control centre, which ensures that products are aligned with Group Security standards.

Working closely with the IT Product teams and the Security Officer, you will take a proactive approach to overall product security and help embed security across the product life cycle.

Responsibilities

• Ensure the overall security of specific products
• Support the security and compliance control centre in ensuring product compliance with Group Security standards
• Define security requirements and implement security controls with the application teams
• Structure and support security testing
• Own security remediation plans
• Provide overall security support to IT Product teams
• Create and document internal processes
• Structure and lead security-related meetings

Expected deliverables include a documented security posture for specific products, maintained security requirements and controls, security test plans and results, remediation plans with tracking of implementation status, documented internal security processes and procedures, support materials for IT Product teams, and meeting agendas, minutes and action plans. Travel may be required depending on mission needs.

Requirements

• Degree in Information Security, Computer Science or a related field
• At least 7 years of experience in Information Technology and IS Security, preferably with cloud products and large international organizations
• Security information systems standards and frameworks (e.g. ISO 2700x)
• Identity and Access Control
• Security Assessment and Testing
• Encryption methods and secure protocols
• Secure Software Development Life Cycle (SSDLC)
• Vulnerability management
• Azure cloud security expertise
• Organizational and analytical skills for complex environments (multi-cultural, multi-country, geographically distributed teams)
• Strong coordination and planning skills applied to security activities, with attention to detail
• Commitment to agreed scope, timelines and quality of deliverables
• Results orientation in executing security initiatives
• Structured approach and ability to synthesize complex security information into clear documentation
• English at C1 level (proficient)
• Availability for occasional travel

Nice to Have

• Data Privacy / GDPR expertise
• Operational Resilience
• ITIL Framework
• Experience in French environment

We Offer

• Hybrid work model (2 days per week in office)

About the Company

[Company description if present]