Cloud Security Lead for Data & AI Platform

L'Oréal; Saint-Ouen-sur-Morin; On-site; EUR 120,000 - 150,000; Full time

Job summary

L'Oréal is seeking a hands-on Cloud Security Leader to secure the Global Beauty Tech Data Platform on Google Cloud and the Agentic AI Platform. You will design security-by-design services, automate with AI, and guide a team across global Zones, Métiers and Divisions.

You will deep-dive into IAM, DLP, disaster recovery, and policy enforcement, partnering with Cybersecurity, DevOps and business units to scale secure solutions.

Qualifications

• 7+ years of cloud security or security engineering experience.
• 2+ years leading a technical team with hands-on GCP and Python.
• Deep knowledge of IAM, VPC-SC, Security Command Center, KMS/CMEK, Secret Manager, and DLP.
• Experience designing disaster recovery and data protection controls.
• Infrastructure-as-Code with Terraform and policy-as-code (OPA/Rego).
• Familiarity with security tools like Google SecOps and SIEMs.

Responsibilities

• Lead, mentor and grow the security team across Zones, Métiers and Divisions.
• Design and enforce GCP access controls and least privilege.
• Embed security by design into the Data Platform lifecycle and architecture standards.
• Operate monitoring and alerting to detect and remediate compliant/non-compliant resources.
• Secure the Agentic AI Platform with guardrails, agent auth, and MCP assessments.
• Define and test DRP to guarantee business continuity.
• Run code reviews and drive AI-driven security automation and innovation.
• Communicate security policies across the Group.

Skills

Cloud security leadership

GCP security

Python

Security governance

Threat detection

Education

GCP PCSE

CISSP or CISM

Tools

Terraform

OPA/Rego

CI/CD pipelines

Cloud Audit Logs

Job description

L'Oréal is seeking a hands-on Cloud Security Leader to secure the Global Beauty Tech Data Platform on Google Cloud and the Agentic AI Platform. You will design security-by-design services, automate with AI, and guide a team across global Zones, Métiers and Divisions.

You will deep-dive into IAM, DLP, disaster recovery, and policy enforcement, partnering with Cybersecurity, DevOps and business units to scale secure solutions.