Cybersecurity Manager - Integration, IT4IT & IoT

L'Oréal; France; Sur place; EUR 90 000 - 120 000; Plein temps

Avantages offerts par ce poste

Professional growth

Real responsibility

Inclusive culture

Societal impact

Résumé du poste

L’Oréal is seeking a Cybersecurity Manager for Integration, IT4IT & IoT to secure our global beauty tech platforms. You will lead information security governance across the Integration Platform, IT4IT Platform, and IoT Hub, collaborating with business and IT teams to embed security into projects.

You’ll manage third-party risk, drive regulatory compliance (GDPR, PCI‑DSS), coordinate risk mitigation, and champion security awareness across the organization.

Qualifications

• 5+ years of experience in information security in similar roles.
• Strong technical background in IT security with knowledge of risk management standards and regulations like GDPR and PCI-DSS.
• Experience in transversal team management and excellent interpersonal skills.
• Knowledge of project management methodologies and Third-Party Security Management.
• Excellent spoken and written English for an international context.
• Security certifications like CISM or CISSP are a plus.

Responsabilités

• Define and enforce information security governance across platforms.
• Ensure integration security methodology is applied with Business and IT teams.
• Monitor Third-Party Cybersecurity Risk Management in collaboration with legal and purchasing teams.
• Identify and mitigate information security risks across asset lifecycles.
• Manage security exceptions and document risk acceptance.
• Prepare and present for cybersecurity committees.
• Coordinate regulatory compliance with Data Privacy and other laws.
• Track security KPIs and implement corrective actions.
• Follow threat and vulnerability management processes and remediation plans.
• Ensure prompt follow-up of security incidents with CSIRT.
• Act as a cybersecurity evangelist and run engaging awareness sessions.

Connaissances

Information security

Risk management

Leadership

Project management

English proficiency

CISM

CISSP

Description du poste

Hello, we’re L’Oréal. We're not just building brands, we're shaping how the world experiences beauty (and it takes a lot of cool jobs to do it). Intrigued? Keep reading, this might be the opportunity you've been searching for.

A Day in the Life

As Our Cybersecurity Manager For Integration, IT4IT & IoT, you will join a team securing the central nervous system of our beauty tech operations. Your scope will cover critical platforms:

• Our Integration Platform: The key platform handling all data exchanges between our systems.
• Our Global IT4IT Platform: The source of truth for all IT topics, where all IT activities are managed.
• Our Global IoT Platform: The hub hosting all innovative IoT devices delivered by our Beauty Tech.

Responsibilities

• Defining and enforcing a clear information security governance across your platforms.
• Ensuring L’Oréal's "Integration of Security in Projects" methodology is properly applied, working jointly with Business and IT Teams.
• Following-up on Third-Party Cybersecurity Risk Management, in close collaboration with legal and purchasing teams.
• Proactively identifying and mitigating information security risks throughout the lifecycle of L’Oréal assets.
• Managing security exceptions and formally documenting risk acceptance.
• Participating in business platform Cybersecurity committees' preparation and presentation.
• Managing regulatory compliance jointly with the concerned teams (e.g., Data Privacy).
• Following-up on compliancy and security KPIs and putting in place appropriate action plans.
• Following-up on threat and vulnerability management processes and their related remediation plans.
• Ensuring a prompt and close follow-up of security incidents, jointly with L’Oréal CSIRT.
• Acting as a Cybersecurity evangelist, designing and leading engaging awareness sessions.

We Are Looking For

You are curious, collaborative, and proactive with a talent for securing complex, interconnected platforms. You are eager to have an impact in a fast‑paced, global environment and value both innovation and autonomy.

You're a Great Match If You Have

• Experience: At least 5 years of experience in information security in similar roles.
• Technical & Risk Knowledge: A strong technical background in IT security, with good knowledge of Risk Management standards and regulations like GDPR and PCI-DSS.
• Leadership & Influence: Experience in transversal team management and excellent interpersonal skills.
• Project & Process Skills: Knowledge of project management methodologies and experience in Third‑Party Security Management.
• Language Skills: Excellent spoken and written English for our international context.
• Mindset: A rigorous, organized, and curious approach. Security certifications like CISM or CISSP are a plus. You may not be an expert in all areas, but you show great curiosity in understanding the non‑mastered ones.

What’s In It For You

• A place for you to leave your comfort zone and grow beyond your potential (here, you’ll be encouraged to try new things and take risks!)
• Real responsibility from day 1, there’s no sitting on the sidelines at L’Oréal
• An environment where people of every ethnicity, social background, age, religion, gender and sexual orientation as well as people with disabilities are accepted, can speak up, will thrive and are celebrated!
• A place where you can contribute to something bigger! Many of our brands have societal /environmental causes to make concrete difference

Who We Are

L’Oréal is present in 150 markets on five continents. For more than a century, L’Oréal has devoted itself solely to "Create beauty that moves the world"; it is now the industry world leader with €42 billion consolidated sales. Together, we solve complex challenges at scale, while making sure we stay committed to making the world a more inclusive and a better place for everyone and our planet.

Today, L’Oréal includes over 9k experts in beauty tech, digital, data and e‑comm and is constantly growing. Championing Beauty Tech, we invent the beauty of the future while becoming the company of the future. To achieve this ambition, L’Oréal continues to recruit diverse, innovative, skilled, and passionate minds in different tech domains such as Data, Digital, Cloud, Cyber Security, IT Architecture, DevOps, Applications, and Infrastructure.

We’re committed to guaranteeing inclusive recruitment processes and to advocating for hiring and promoting each candidate in an ethical and equitable way. The Group strictly prohibits discrimination against any applicant for employment because of the individual’s gender identity or expression, sexual orientation, visible and/or invisible disabilities, socio‑economic and/or multicultural origins, health conditions, age, religion, or any other characteristics protected by law.