Global Cybersecurity Manager - Omnisales

Talantir; Saint-Ouen-sur-Seine; Hybrid; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid work policy

VIP staff shop

Company restaurant

Job summary

L'Oréal is seeking an Omnisales Cybersecurity Manager for its O+O group. You will report to the O+O CISO and manage information security governance and risk across a global scope, including a major cybersecurity transformation.

You will drive security integration in projects, supervise third‑party risk, and coordinate withBusiness and IT teams to meet policy and regulatory requirements while promoting a security-first culture.

Qualifications

• Strong technical background in IT security.
• Excellent interpersonal skills.
• Good knowledge of Risk Management standards.
• Good knowledge of GDPR/PCI-DSS regulations.
• Excellent spoken/written English (international context).
• Rigorous and organized mindset.
• Team management experience.

Responsibilities

• Define and enforce information security governance across scope.
• Ensure security is integrated in projects and with business/IT teams.
• Manage third-party cybersecurity risk with legal and purchasing teams.
• Identify and mitigate information security risks across assets lifecycle.
• Lead Titanium Retail Cybersecurity program with global/zone teams.
• Support regulatory compliance with data privacy standards.
• Follow-up on security incidents with CSIRT.
• Deliver cybersecurity awareness sessions.

Skills

IT security

Interpersonal skills

Risk management

GDPR/PCI-DSS knowledge

English proficiency

Organization

Transversal team management

Tools

CISSP

Job description

Unleash Your Potential at L'Oréal's Beauty Tech!

For more than a century, L’Oréal has devoted itself solely to one business: Beauty. Present in 150 countries across five continents and with €42 billion consolidated sales, L'Oréal is the global industry leader. With 37 global beauty brands across four divisions, L'Oréal offers beauty for each covering all beauty categories and catering to all beauty desires. With the acquisition of the Australian brand Aēsop in 2023, the Group continues to expand its portfolio through targeted acquisitions as part of its drive to create the future of beauty.

Today, L’Oréal includes more than 2,400 tech people and is constantly growing. Beauty Tech is changing the game and leading the shift towards new consumer realities and a digital disruption. Championing Beauty Tech, we invent the beauty of the future while becoming the company of the future.

Beauty Tech is how we know our consumers intimately, augmenting their beauty journeys with unparalleled diverse and sustainable experiences. Beauty Tech equips the Group with the key assets it needs to conquer this new world, where Tech has become strategic. With this ambition, L'Oréal continues to recruit diverse, innovative, skilled and passionate minds in different tech domains such as Data, Digital, Cloud, Cyber Security, IT Architecture, DevOps, Applications and Infrastructure.

YOUR FUTURE TEAM : O+O – SHAPING THE FUTURE OF OMNICHANNEL BEAUTY

This position is part of O+O (Online + Offline) Group Cybersecurity Team.

O+O refers to the strategic integration of digital and physical touchpoints into a single ecosystem, to provide a unified and seamless experience across every consumer & customer interaction.

The Team works in very close collaboration with the Divisions and Zones, as well as with other L’Oréal functions such as Marketing, Finance, and more.

What a day in the life of the Omnisales Cybersecurity Manager looks like

Reporting to the O+O CISO, you will be responsible of all aspects of Information security and technology Risk Management for O+O Omnisales scope, including a major Cybersecurity transformation program with a worldwide impact (Titanium). It is a Leadership role that requires a strong technical background, as well as excellent communication skills to work jointly with Business and IT Teams in order to ensure compliancy to L'Oréal Information Security Policy and applicable laws and regulations, while enabling and facilitating the Business.

What You’ll Do

• Define and enforce a clear information security governance throughout your scope (animation of security committees, etc…)
• Jointly with the Business and IT Teams, ensure L'Oréal Integration of Security in Projects methodology is properly applied
• Follow-up on Third Party Cybersecurity Risk Management: in particular, work closely with legal and purchasing teams to ensure appropriate integration of security requirements at the earliest stages of Third Parties Selection and contracting
• Proactively identify and mitigate information security risks throughout the lifecycle of L'Oréal Omnisales assets
• Manage security exceptions and formally document risk acceptance and associated compensatory measures
• Lead and drive Titanium Retail Cybersecurity program jointly with infrastructure and IT O+O Omnisales Teams, both at global and zone level
• Participate in O+O Cybersecurity committees preparation and presentation
• Manage regulatory compliance jointly with the concerned teams (Data Privacy, etc.)
• Follow-up on compliancy and security KPIs and put in place appropriate action plans to continuously improve these KPIs
• Follow-up on Threat and Vulnerability Management process and related remediation plans
• Ensure prompt and close follow-up of security incidents, jointly with L'Oréal CSIRT
• Act as a Cybersecurity evangelist, designing and leading engaging awareness sessions for diverse audiences
• Contribute to L'Oréal O+O Cybersecurity Community

THIS IS WHAT YOU WILL NEED TO SUCCEED!

First and foremost, we love people that are curious, collaborative, eager to have an impact, proactive and who value innovation, autonomy, and team spirit.

We are looking for someone with at least 10 years of experience in information security in similar roles.

Required Skills

• Strong technical background in IT security
• Excellent interpersonal skills
• Good knowledge of Risk Management standards
• Good knowledge of domain-specific and security-related regulations and standards such as GDPR and PCI-DSS
• Excellent spoken/written English (international context)
• Rigorous and organized mindset
• Team Management Experience (particularly Transversal Team Management)

In this specific position, it will be important for you to have Cybersecurity certifications such as CISSP.

LET US GIVE YOU 6 OTHER REASONS TO JOIN US!

Joining L'Oréal Means Joining a Company That

• Invests in Tech and positions its Tech teams at the heart of its digital transformation strategy.
• Allows its employees to have a real impact, to test their ideas, to innovate and to build our future.
• Offers a Hybrid Work Policy: 3 Days in Office, 2 Days Work from Home.
• Provides many benefits: VIP staff shop offering our products at a preferential rate, a company restaurant & gym, 60% reimbursement of transportation subscription, a work council offering lots of employee discounts (social & cultural activities, holiday vouchers etc.) and much more!
• Delivers a powerful and innovative HR policy: dynamic mobility policy, significant investment in employee training, regular re-evaluation of remuneration, numerous innovative HR measures: Time Savings Account, paternity leave, Citizen Day, etc.
• Is an Equal Opportunity Employer and takes pride in a diverse environment. We would love to find out more about you as a candidate and we do not discriminate in recruitment, hiring, training, promotion, or other employment practices. The beauty we find in our differences gives us the freedom to go beyond. That’s the beauty of L'Oréal.

GOOD TO KNOW: THE RECRUITMENT PROCESS

Interview with HR, Interview with the hiring manager, Interview with the business leader

We will be delighted to exchange with you!