CISO O+O (ONLINE + OFFLINE)

STATION F; Saint-Ouen; Hybrid; EUR 120,000 - 180,000; Full time

Benefits offered by this job

Flexible hybrid work

Remote work 2 days/week

Saint-Ouen office

Job summary

L’Oréal recherche un Responsable sécurité des systèmes d’information expérimenté pour diriger l’équipe Cybersecurity O+O. Vous piloterez la stratégie et le cadre de sécurité, avec une forte collaboration internationale et un impact sur les projets globaux.

Vous serez rattaché à l’équipe Global Cybersecurity et travaillerez dans un modèle hybride, avec présence régulière à Saint-Ouen et des possibilités de travail à distance. Exigences : expérience >=10 ans et CISSP ou équivalent.

Qualifications

• Solide expérience en sécurité des systèmes d’information et cybersécurité.
• Connaissance approfondie des standards de gestion des risques et de conformité (GDPR, PCI-DSS).
• Maîtrise du français et de l’anglais (écrit et oral).
• Certifications en cybersécurité souhaitées (exemple CISSP).
• Capacité à gérer des équipes transversales et à communiquer à l’échelle internationale.

Responsibilities

• Gérer l’équipe Cybersecurity O+O, composée de managers internes et externes.
• Définir et appliquer la stratégie de sécurité pour le périmètre IT O+O.
• Maintenir des relations étroites avec les zones et animer la communauté Cybersecurity O+O.
• Veiller à l’intégration de la sécurité dans les projets et dans les achats/parties tierces.
• Suivre les risques de cybersécurité des tiers et coordonner les exigences de sécurité en amont.
• identifier et atténuer les risques tout au long du cycle de vie des actifs O+O.
• Gérer les exceptions de sécurité et documenter les mesures compensatoires.
• Conduire le programme Titanium O+O avec les équipes globales et zonales.
• Assurer la conformité réglementaire et le suivi des KPI de sécurité.
• Sensibiliser et diffuser la sécurité à divers publics.
• Contribuer à créer une beauté qui avance le monde en sécurité.

Skills

IT security

Cybersecurity strategy

Interpersonal skills

Risk management

GDPR/PCI-DSS

FR/EN bilingual

Rigorous mindset

Team management

CISSP

Job description

About

Notre Raison d'être : Créer la beauté qui fait avancer le monde.

About

Notre Raison d'être : Créer la beauté qui fait avancer le monde.

Le désir de beauté est une force puissante qui nous fait avancer. La beauté ne se limite pas à l’apparence. Elle nous donne confiance en nous, en qui nous voulons être, et dans notre relation avec les autres.

Depuis plus d’un siècle, nous exerçons ce métier unique : créateur de beauté. Notre but est d’offrir à tous, partout dans le monde, le meilleur de la beauté en termes de qualité, d’efficacité, d’efficacité ?

Et Parce Que Nous Sommes Le Leader De La Beauté, Nous Sommes Conscients Que Tout Ce Que Nous Faisons Peut Avoir Un Impact Significatif. C’est Pourquoi Nous Agissons Pour Inventer le futur de la beauté en ayant recours au meilleur de la technologie et de la science, inspirées par la nature.

Faire avancer l’innovation sociale en offrant à nos collaborateurs le meilleur en matière de conditions de travail, de formation et de protection sociale.

Construire une entreprise toujours plus inclusive qui reflète la diversité des consommateurs que nous servons.

Nouer des partenariats durables avec nos clients et fournisseurs, basés sur la confiance et le développement mutuels.

Œuvrer partout pour la cause des femmes et au développement des communautés qui nous entourent.

Protéger la beauté de la planète en luttant contre le changement climatique, en respectant la biodiversité et en préservant les ressources naturelles.

Job Description

Hello, we're L'Oréal. We're not just building brands, we're shaping how the world experiences beauty (and it takes a lot of cool jobs to do it). Intrigued? Keep reading, this might be the opportunity you've been searching for.

A Day in the Life

This position is part of L'Oréal Group Cybersecurity Team. O+O (Online + Offline) refers to the strategic integration of digital and physical touchpoints into a single ecosystem, to provide a unified and seamless experience across every consumer & customer interaction.

Your Future Team Is Organized Around 3 Key Pillars

• Online: E-commerce, Website Factory, Consumer Engagement... This department powers up L'Oréal Digital Footprint jointly with Digital and Marketing Business Teams.
• Omnisales: Retail, Services, Commercial... Omnisales mission is to turn L'Oréal Points of Sales into Points for Experience, and to augment all commercial Teams in Markets Worldwide.
• Omniinnovation: Station F, Gen AI, Retail Lab... This Team accompanies innovative and creative initiatives to scout the most promising ones, which could be scaled at L'Oréal.

The Team works in very close collaboration with the Divisions and Zones, as well as with other L'Oréal functions such as Marketing, Finance, and more.

Reporting to the Business Platforms CISO, you will be responsible for all aspects of Information security and technology Risk Management for O+O scope, including a major Cybersecurity transformation program with a worldwide impact (Titanium). It is a Leadership role that requires a strong technical background, as well as excellent communication skills to work jointly with Business and IT Teams in order to ensure compliance to L'Oréal Information Security Policy and applicable laws and regulations, while enabling and facilitating the Business.

Your Responsibilities

• Manage O+O Cybersecurity Team, composed of both internal and external Departments Cybersecurity Managers.
• Define and enforce an information security strategy for IT O+O scope.
• Maintain close relationships with zones animating O+O Cybersecurity Community worldwide.
• Jointly with the Business and IT Teams, ensure L'Oréal Integration of Security in Projects methodology is properly applied.
• Follow-up on Third Party Cybersecurity Risk Management: in particular, work closely with legal and purchasing teams to ensure appropriate integration of security requirements at the earliest stages of Third Parties Selection and contracting.
• Proactively identify and mitigate information security risks throughout the lifecycle of O+O assets.
• Manage security exceptions and formally document risk acceptance and associated compensatory measures.
• Lead and drive Titanium O+O Cybersecurity program jointly with infrastructure and IT O+O Teams, both at global and zone level.
• Manage regulatory compliance jointly with the concerned teams (Data Privacy, etc.).
• Follow-up on compliance and security KPIs and put in place appropriate action plans to continuously improve these KPIs.
• Follow-up on Threat and Vulnerability Management process and related remediation plans.
• Ensure prompt and close follow-up of security incidents, jointly with L'Oréal CSIRT.
• Act as a Cybersecurity evangelist, designing and leading engaging awareness sessions for diverse audiences.
• As part of L'Oréal Global Cybersecurity Team, you will actively contribute to securely Create the Beauty that Moves the world.

We Are Looking For

First and foremost, we love people that are curious, collaborative, eager to have an impact, proactive and who value innovation, autonomy, and team spirit.

We are looking for someone [highly experienced] [with at least 10 years of experience] in information security in similar roles.

Your Core Skills

• Strong technical background in IT security.
• Good knowledge of Cybersecurity Strategy definition and implementation.
• Excellent interpersonal skills.
• Good knowledge of Risk Management standards.
• Good knowledge of domain-specific and security-related regulations and standards such as GDPR and PCI-DSS.
• Excellent spoken/written French & English (international context).
• Rigorous and organized mindset.
• Team Management Experience (particularly Transversal Team Management).
• Important: You hold Cybersecurity certifications such as CISSP.

What's In It For You

• A place for you to leave your comfort zone and grow beyond your potential (here, you'll be encouraged to try new things and take risks!)
• Real responsibility from day 1, there's no sitting on the sidelines at L'Oréal
• An environment where people of every ethnicity, social background, age, religion, gender and sexual orientation as well as people with disabilities are accepted, can speak up, will thrive and are celebrated!
• A place where you can contribute to something bigger! Many of our brands have societal /environmental causes to make concrete difference
• A flexible hybrid work model: a minimum of 3 days per week at our SO Tech office in Saint-Ouen, and up to 2 days of remote work

Who We Are

L'Oréal is present in 150 markets on five continents. For more than a century, L'Oréal has devoted itself solely to 'Create beauty that moves the world'; it is now the industry world leader with €42 billion consolidated sales. Together, we solve complex challenges at scale, while making sure we stay committed to making the world a more inclusive and a better place for everyone & our planet.

Today, L'Oréal includes over 9k experts in beauty tech, digital, data and e-comm and is constantly growing. Championing Beauty Tech, we invent the beauty of the future while becoming the company of the future. To achieve this ambition, L'Oréal continues to recruit diverse, innovative, skilled, and passionate minds in different tech domains such as Data, Digital, Cloud, Cyber Security, IT Architecture, DevOps, Applications, and Infrastructure.

We're committed to guaranteeing inclusive recruitment processes and to advocating for hiring and promoting each candidate in an ethical and equitable way. The Group strictly prohibits discrimination against any applicant for employment because of the individual's gender identity or expression, sexual orientation, visible and/or invisible disabilities, socio-economic and/or multicultural origins, health conditions, age, religion, or any other characteristics protected by law.

Additional Information

• Contract Type: Full-Time
• Location: Saint-Ouen
• Possible partial remote