BUSINESS UNIT STATEMENT

To support our business strategy and digital transformation, AXA is setting up a new information security practice to ensure a coordinated response to the increasing threat of cybersecurity, enabling consistent decision-making across the organization.

Our vision of information security is to protect our stakeholders by securing our information resources, managing our cyber risks and enabling effective and efficient business strategies that are fully sponsored by executives and supported by all AXA employees.

MISSION

Within the AXA Group Information Security team, you will be responsible for leading a critical initiative aimed at protecting our sensitive data. Building on the foundational work of the OneTrust Project 3B ("Protect our Data") in 2025, the first half of 2026 is dedicated to continuing and strengthening our Data Leakage Prevention (DLP) posture across the Group.

Your mission is to steer this project, mature our security framework, support our global entities, and explore innovative solutions to counter emerging data leakage threats, including those associated with Artificial Intelligence.

Key Objectives

As the GRC - Assurance Manager specialising in DLP , your primary goals for the first half of 2026 will be to:

- Mature the DLP Information Security Framework: Finalize and support the release of the updated DLP Security Instruction through the formal Policy Working Group (PWG) process, and deliver the first official version of the comprehensive DLP Guideline.
- Lead the Steering and Execution of OneTrust Project 3B: Drive the project's action plan, report on its progress, and ensure alignment between product roadmaps, security objectives, and entity needs.
- Innovate and Strengthen DLP Capabilities: Update the Group's data leakage risk scenarios with a specific focus on AI-related risks,



and explore how AI can be leveraged to enhance our DLP detection and response capabilities ("AI for DLP").
- Drive Entity Engagement and Communication: Ensure that AXA entities are well-supported and informed by providing clear guidance, communication kits, and regular reporting sessions to facilitate their implementation of DLP controls.

Key Responsibilities

Your day-to-day activities will involve:

- Project Governance and Steering:
- Prepare and animate the bi-monthly Operational Committee and contribute to the monthly Steering Committee meetings.
- Maintain and improve the project's organization, documentation, and reporting kits.
- Track the execution of the action plan, review implementation evidence from entities, and report on progress to the program governance.

- Framework and Risk Management:

- Support the update of the DLP Security Instruction and ensure its alignment with other key frameworks (e.g., MTSB, SAF, Security Basics).
- Lead the finalization of the DLP Guideline, coordinating with product teams to document configuration best practices for key technologies (proxies, endpoints, M365, etc.).
- Conduct workshops with key entities (e.g., AXA GO, AXA UK, AXA Belgium) to review and update data leakage risk scenarios.

- Technical and Stakeholder Coordination:

- Support and coordinate with product teams (e.g., CyberDefense, Workplace, ShareBox) on the implementation of their DLP-related actions.




- Follow up on the design and testing of postponed technical actions from the previous year.
- Contribute to the definition of features related to the Group's data sharing key principles.

- Communication and Support:

- Develop and distribute communication materials, such as "OnePagers" and tips, to help entities successfully implement key controls.
- Co-animate quarterly sharing and reporting sessions with stakeholders.
- Act as a key point of contact to provide guidance and support to entities regarding the Project 3B execution.

QUALIFICATIONS

- Experience:
- Significant experience (5-8 years) in cybersecurity project management.
- Proven, hands-on experience leading Data Leakage Prevention (DLP) programs or projects within a large, international organization.

- Technical Skills:

- In-depth knowledge of DLP concepts, strategies, and technologies (e.g., endpoint DLP, network DLP, email security, CASB).
- Strong understanding of information protection frameworks, data classification, and encryption.
- Experience with risk analysis methodologies and updating risk scenarios.
- Familiarity with the security features of contemporary workplace environments, particularly Microsoft 365 (Purview, Entra ID).
- An awareness of AI-related data security risks is a strong plus.

- Personal Qualities:

- Excellent project management skills, with a talent for steering complex initiatives and ensuring deliverables are met on time.
- Strong ability to lead workshops and manage a diverse group of stakeholders, from technical product owners to entity representatives.
- Clear and effective communication skills, both written and verbal, for creating documentation, reports, and communication kits.
- Fluency in English is required.

📌 Manager (Bengaluru)
🏢 AXA Global Business Services
📍 Bengaluru