Cloud Platform Security Lead - AXA UK

AXA is a global leader in insurance and financial services, dedicated to helping customers protect what matters most to them. As the sixth-largest insurance company in the world, we provide a wide range of services, including health, car, home, and business insurance. We support millions of customers worldwide, helping them navigate life's uncertainties with confidence.

AXA UK Support Functions look after our three customer-facing business units, providing the infrastructure and expertise to make sure we can be there for our customers.

Job overview:

We have a new opportunity for a Cloud Platform Security Lead to join us. In this specialist role you’ll provide technical security guidance to drive our platform security to the highest, drive and adoption and implementation of Cloud Security solutions and practices and work closely with our Cyber Security operational teams.

Key responsibilities:

• Define, produce, and present security posture metrics, risk reports, compliance status, and governance dashboards for AWS and Azure platforms to senior leadership and stakeholders
• Implement, and continuously improve preventative, detective, and corrective security controls, guardrails, and policy enforcement across cloud platform services
• Review, challenge, and approve cloud platform architectures and designs, ensuring alignment with enterprise security, regulatory, and technology standards
• Drive security-by-design principles and integrate security controls into cloud services, Infrastructure-as-Code (IaC), automation frameworks, and CI/CD pipelines
• Own vulnerability management, threat modelling, exposure management, and remediation governance across AWS and Azure platforms, ensuring security findings are remediated within agreed timelines and escalated where required
• Maintain compliance with internal policies, regulatory requirements, audit controls, and industry frameworks, ensuring audit readiness and timely remediation of control gaps
• Identify, assess, prioritize, mitigate, and report security risks, exceptions, and technical debt, ensuring risks are managed within approved risk tolerances

Work arrangements:

At AXA we work smart, empowering our people to balance their time between home and the office in a way that works best for them, their team and our customers. You'll work at least two days a week (40%) away from home, moving to three days a week (60%) in the future. Away from home means attending the office, visiting clients or attending industry events. We’re also happy to consider flexible working arrangements, which you can discuss with Talent Acquisition.

Your skills & experience:

• Cloud security architecture and engineering expertise
• Significant experience securing large scale cloud platforms – Azure preferred
• Ability to present security risk and governance reports to leadership audiences