Cybersecurity Officer

Pernod Ricard; Paris; Sur place; EUR 55 000 - 80 000; Plein temps

Résumé du poste

Une entreprise leader dans le secteur recherche un Cybersecurity Officer pour assurer la conformité et la sécurité des opérations IT. Vous serez responsable de la définition des stratégies de sécurité, de la gestion des incidents critiques et de la formation continue des employés sur les pratiques de cybersécurité. Ce rôle est essentiel pour garantir la sécurité et la protection des données au sein de l'organisation.

Qualifications

• Au moins 5 ans d'expérience dans un rôle similaire.
• Expérience avec les incidents critiques et la conformité.
• Compétences prouvées en méthodologies de sécurité.

Responsabilités

• Définir et mettre en œuvre la stratégie de sécurité IT.
• Contrôler la conformité de la sécurité des opérations IT.
• Gérer la communication et la sensibilisation à la sécurité.

Connaissances

Analyse des risques

Audit ISO 27001

Gestion des incidents

Formation

BAC+5 en sécurité de l'information

Description du poste

The Cybersecurity Officer is responsible for:

Participating to the definition and implementation of the IT security strategy and policies under the coordination of Cybersecurity leader

Ensuring Cybersecurity compliance of IT Operations across all regions with the business requirements

Controlling and reporting permanently the IT operations activities compliance based on the related security requirements

Connecting with local regulations and overseeing the data protection within the organization

Cybersecurity communication, leading investigations and audits, awareness training for all PR employees

Analyzing permanently risks and reporting to the Head of Cybersecurity

Providing cybers security technical support Level 2/Level 3

The main responsibilities are:

IT Operations security policies, standards and procedures

Contributing to the global security strategy and policies definition and implementation

Overseeing and controlling the information security policy and data protection policy implementation

Contributing to the definition and implementation of Business Continuity Plan and Disaster Recovery Plan by collaborating with other stakeholders within IT Operations and Business

Ensuring the alignment between the defined procedures and security management tools and the security & objectives

Contributing to the communication of security policies, standards and procedures of IT Operations to internal and external stakeholders

Security compliance control and reporting

Analyzing SOC reporting for compliance monitoring and bringing recommendations or alarming top management about IT security flaws

Rolling out IT Operations security risk evaluation and impacts analysis

Raising alarms to Cybersecurity leader, management team and related business/subsidiaries whereas a severe incident impacting the IT security is detected

Reporting to the Cybersecurity leader and the Group Security Steering Committee the status of the security maturity with action plan or remediation plan

Contributing the internal and external audits

Coordination and IT security monitoring

Coordinating and following up remediation plans implementation with key indicators

Participating to the internal and external events related to the information security

Connection with local Cybersecurity policies, requirements and regulations

Understanding the local cybersecurity policies, requirements and regulations about security, data protection and data privacy regulations

Ensuring the cybersecurity compliance of IT Operations with the local requirement

Responsible for the IT Operations security communication content preparation, validation and distribution to all stakeholders (internal and external)

Ensuring the definition and roll out of communication and awareness training plan/program towards all PR employees and their consistency

Technology watching

Following up security evolutions, major trends and best practices on technology, solutions and regulations

Working closely with security vendors on new types of cyber-crime or computer viruses to help the IT Operations keep the security systems up to date

Cyber security technical support

Contributing to critical incidents, crisis management and mitigation plans

Providing technical support Level 2/Level 3

The profile required is:

Education required: BAC+5 (engineering or business school / university specialized of information security and/or telecom, information system and network security, security, information encryption and coding, …)

Experience / Background:

5 + years of experience in a related area

Must have experience dealing with various levels within company

Proven track record of institutionalizing leading-practice methodologies and processes

Specific Expertise: Auditor/Lead Auditor ISO 27001 Implementer/Lead ISO 27001