Global CISO & Hybrid Cybersecurity Transformation Lead

L'Oréal; Saint-Ouen-sur-Seine; Hybrid; EUR 130,000 - 180,000; Full time

Benefits offered by this job

Hybrid work model

3 days on-site at SO Tech Saint-Ouen

Remote work up to 2 days

Job summary

L'Oréal is seeking a Senior Information Security leader to own the O+O (Online + Offline) cybersecurity program, reporting to the Business Platforms CISO. You will drive security strategy, manage a global team, coordinate with legal, purchasing and IT, and ensure regulatory compliance such as GDPR and PCI-DSS.

A hybrid model with strong communication across businesses is required. Expect to shape security in a multinational environment, engage with diverse audiences, and drive security KPIs

Qualifications

• Strong technical background in IT security.
• Good knowledge of Cybersecurity Strategy definition and implementation.
• Excellent interpersonal skills.
• Good knowledge of Risk Management standards.
• Good knowledge of GDPR and PCI-DSS.
• Excellent spoken/written French & English (international context).
• Rigorous and organized mindset.
• Team management experience, transversal leadership.
• Cybersecurity certifications such as CISSP.

Responsibilities

• Define and enforce an information security strategy for IT O+O scope.
• Lead Titanium O+O Cybersecurity program with global reach.
• Manage O+O Cybersecurity Team, internal and external managers.
• Ensure integration of security in projects and early third-party risk considerations.
• Monitor compliance KPIs and drive remediation and awareness initiatives.

Job description

L'Oréal is seeking a Senior Information Security leader to own the O+O (Online + Offline) cybersecurity program, reporting to the Business Platforms CISO. You will drive security strategy, manage a global team, coordinate with legal, purchasing and IT, and ensure regulatory compliance such as GDPR and PCI-DSS.

A hybrid model with strong communication across businesses is required. Expect to shape security in a multinational environment, engage with diverse audiences, and drive security KPIs