CISO, Online & Offline Security Leader

L'Oreal; France; Sur place; EUR 120 000 - 180 000; Plein temps

Résumé du poste

L'Oréal's Group Cybersecurity Team is seeking a senior leader to drive information security and risk management for the O+O scope, including a major Titanium program with worldwide impact. Reporting to the Business Platforms CISO, you will align security with business goals while enabling the Digital and Omnichannel initiatives.

This leadership role requires a deep technical background and excellent communication to partner with Business and IT, manage a diverse team, and ensure compliance with

Qualifications

• 10+ years in information security
• Proven leadership in security programs
• Experience with global teams
• Strong communication with business & IT
• Knowledge of regulatory requirements like GDPR

Responsabilités

• Manage O+O Cybersecurity Team, internal and external Departments Cybersecurity Managers.
• Define and enforce an information security strategy for IT O+O scope.
• Maintain close relationships with zones animating O+O Cybersecurity Community worldwide.
• Jointly with the Business and IT Teams, ensure L'Oréal Integration of Security in Projects methodology is properly applied.
• Follow‑up on Third Party Cybersecurity Risk Management: work with legal and purchasing teams to ensure security requirements at early stages of third parties.
• Proactively identify and mitigate information security risks throughout the lifecycle of O+O assets.
• Manage security exceptions and document risk acceptance and compensatory measures.
• Lead and drive Titanium O+O Cybersecurity program with global and zone teams.
• Manage regulatory compliance jointly with the concerned teams (Data Privacy, etc.).
• Follow‑up on compliance and security KPIs and action plans to improve these KPIs.
• Follow‑up on Threat and Vulnerability Management and related remediation plans.
• Ensure prompt follow‑up of security incidents with L’Oréal CSIRT.
• Act as a Cybersecurity evangelist, designing and leading awareness sessions for diverse audiences.
• Contribute to securely Create the Beauty that Moves the world.

Connaissances

IT security

Cybersecurity strategy

Risk management

GDPR & PCI‑DSS

English proficiency

Team leadership

CISSP

Description du poste

L'Oréal's Group Cybersecurity Team is seeking a senior leader to drive information security and risk management for the O+O scope, including a major Titanium program with worldwide impact. Reporting to the Business Platforms CISO, you will align security with business goals while enabling the Digital and Omnichannel initiatives.

This leadership role requires a deep technical background and excellent communication to partner with Business and IT, manage a diverse team, and ensure compliance with