Senior Specialist

Job Description:

AXA XL is an Equal Opportunity Employer.

We are seeking a highly skilled expert in Security with good understanding of Artificial Intelligence, Machine Learning and AI red Teaming to join our Security Risk Management team. This role will focus on performing enhanced risk assessments of new projects and proof of concepts where artificial intelligence (AI) is being utilised and deemed to be a material risk to the company. The ideal candidate will have a robust background in Security, Risk management and be familiar with AI red teaming techniques. This position will require the ability to assess risks effectively and propose appropriate compensatory controls.

What will your essential responsibilities include?

• The Senior AI Security Risk Specialist will work under the responsibility of the Head of IS Services and Risk Management. The responsibilities of the role will be to conduct enhanced risk assessments on new AI solutions being implemented.
• Put Artificial Intelligence risks into simple words to be presented to the leadership team in the Operational Risk and Compliance Committee monthly
• Improve the current Security risk assessment methodology for complex AI systems
• Translating technical jargon and complex IT risks into business language is a must
• Support the business and IT stakeholders in completing risk assessments for their AI use case.
• Conduct in-depth technical assessments of AI solutions to identify security risks.
• Develop threat models for AI systems to anticipate and account for potential impacts due to misuse, abuse, or other adversarial attacks.
• Document all findings and develop mitigation strategies for identified risks, and coordinate with the project team or business partners to deploy countermeasures to reduce risk to systems and applications.
• Communicate progress on enhanced risk assessments performed to the AI Triage Group and AI Governance Working Group.
• Co-ordinate with the Data Privacy and Artificial Intelligence team, Innovation and Data Analytics team, Operational Risk team, Project teams and Business Functions to ensure all relevant input is provided when assessing risks.
• Prioritise enhanced risk assessment based on business value, project timelines and risk exposure.
• Ensure leadership is aware of key risks, potential threats, and if there are anticipated changes to ongoing projects.
• Produce reports and presentations that outline findings, explain risk positions, and recommend changes.
• Leverage research, industry trends, and internal data points to understand how AI systems could be abused and misused.

You must have an IT background and a good understanding of Artificial Intelligence (LLM and Deep learning model development and deployment)

We're looking for someone who has these abilities and skills:

Required Skills and Abilities:

• Fluent in English.
• Master's Degree in a Computer Science, Information Security, Statistics or related field with years of professional experience in Risk Management and/or Information Security
• Expert in synthesizing and clearly communicating complex information to all audiences up to C-Level leaders (Required)
• Demonstrated ability in artificial intelligence.
• Knowledge of AI red teaming
• Experience in articulating risks in business language and advising on the appropriate risk management action (Required)
• Excellent attention to detail and the ability to create clear, concise and engaging presentations breaking down difficult problems (Required)
• Knowledge of Information Security frameworks (Mitre ATT&CK, FAIR, NIST, ISO 2700X …) (Required)
• Expert analytical and reporting skills (Required)
• Excellent interpersonal and collaborative skills (Required)
• Expert in Microsoft Office (Word, Excel, PowerPoint, SharePoint) (Required)
• Experience in multinational companies (Required)
• Outstanding knowledge of Risk management (Required)
• Experience in information security management reporting and related methodologies (Preferred)
• Information Security and /or Information Technology industry certification (CISSP, CISM, or equivalent) (Preferred)
• Knowledge of Risk management frameworks is a plus (ISO 3100X, NIST 800-30/37/39, ENISA, EBIOS, OCTAVE, FAIR).

Desired Skills and Abilities:

• Experience in information security management reporting and related methodologies (Preferred)
• Effective knowledge of Information Security frameworks (Mitre ATT&CK, NIST, ISO 2700X …) (Preferred)
• Expertise in Python (Preferred)

Demonstrable experience with LLMs with understanding of AI/ML frameworks (PyTorch, TensorFlow, etc.) (Preferred)

Inclusion

AXA XL is committed to equal employment opportunity and will consider applicants regardless of gender, sexual orientation, age, ethnicity and origins, marital status, religion, disability, or any other protected characteristic. At AXA XL, we know that an inclusive culture and enables business growth and is critical to our success. That's why we have made a strategic commitment to attract, develop, advance and retain the most inclusive workforce possible, and create a culture where everyone can bring their full selves to work and reach their highest potential. It's about helping one another — and our business — to move forward and succeed.

• Five Business Resource Groups focused on gender, LGBTQ+, ethnicity and origins, disability and inclusion with 20 Chapters around the globe.
• Robust support for Flexible Working Arrangements
• Enhanced family-friendly leave benefits
• Named to the Diversity Best Practices Index
• Signatory to the UK Women in Finance Charter

Learn more at AXA XL is an Equal Opportunity Employer.

Total Rewards

AXA XL's Reward program is designed to take care of what matters most to you, covering the full picture of your health, wellbeing, lifestyle and financial security. It provides competitive compensation and personalized, inclusive benefits that evolve as you do.

We're committed to rewarding your contribution for the long term, so you can be your best self today and look forward to the future with confidence.

Sustainability

At AXA XL, Sustainability is integral to our business strategy. In an ever-changing world, AXA XL protects what matters most for our clients and communities. We know that sustainability is at the root of a more resilient future. Our Sustainability strategy, called "Roots of resilience", focuses on protecting natural ecosystems, addressing climate change, and embedding sustainable practices across our operations.

Our Pillars:

• Valuing nature: How we impact nature affects how nature impacts us. Resilient ecosystems - the foundation of a sustainable planet and society – are essential to our future. We're committed to protecting and restoring nature – from mangrove forests to the bees in our backyard – by increasing biodiversity awareness and inspiring clients and colleagues to put nature at the heart of their plans.
• Addressing climate change: The effects of a changing climate are far-reaching and significant. Unpredictable weather, increasing temperatures, and rising sea levels cause both social inequalities and environmental disruption. We're building a net zero strategy, developing insurance products and services, and mobilizing to advance thought leadership and investment in societal-led solutions.
• Integrating ESG: All companies have a role to play in building a more resilient future. Incorporating ESG considerations into our internal processes and practices builds resilience from the roots of our business. We're training our colleagues, engaging our external partners, and evolving our sustainability governance and reporting.
• AXA Hearts in Action: We have established volunteering and charitable giving programs to help colleagues support causes that matter most to them, known as AXA XL's "Hearts in Action" programs. These include our Matching Gifts program, Volunteering Leave, and our annual volunteering day – the Global Day of Giving.

For more information, please see

AXA XL, the P&C and specialty risk division of AXA, is known for solving complex risks. For mid-sized companies, multinationals and even some inspirational individuals we don't just provide re/insurance, we reinvent it.

How? By combining a comprehensive and efficient capital platform, data-driven insights, leading technology, and the best talent in an agile and inclusive workspace, empowered to deliver top client service across all our lines of business property, casualty, professional, financial lines and specialty.

With an innovative and flexible approach to risk solutions, we partner with those who move the world forward.

Learn more