Global Omnichannel Cybersecurity Leader (Hybrid)

L'Oréal; Saint-Ouen-sur-Seine; Hybrid; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid work policy

VIP staff shop

Company restaurant

Job summary

L'Oréal is seeking an Omnisales Cybersecurity Manager for its O+O group. You will report to the O+O CISO and manage information security governance and risk across a global scope, including a major cybersecurity transformation.

You will drive security integration in projects, supervise third‑party risk, and coordinate withBusiness and IT teams to meet policy and regulatory requirements while promoting a security-first culture.

Qualifications

• Strong technical background in IT security.
• Excellent interpersonal skills.
• Good knowledge of Risk Management standards.
• Good knowledge of GDPR/PCI-DSS regulations.
• Excellent spoken/written English (international context).
• Rigorous and organized mindset.
• Team management experience.

Responsibilities

• Define and enforce information security governance across scope.
• Ensure security is integrated in projects and with business/IT teams.
• Manage third-party cybersecurity risk with legal and purchasing teams.
• Identify and mitigate information security risks across assets lifecycle.
• Lead Titanium Retail Cybersecurity program with global/zone teams.
• Support regulatory compliance with data privacy standards.
• Follow-up on security incidents with CSIRT.
• Deliver cybersecurity awareness sessions.

Skills

IT security

Interpersonal skills

Risk management

GDPR/PCI-DSS knowledge

English proficiency

Organization

Transversal team management

Tools

CISSP

Job description

L'Oréal is seeking an Omnisales Cybersecurity Manager for its O+O group. You will report to the O+O CISO and manage information security governance and risk across a global scope, including a major cybersecurity transformation.

You will drive security integration in projects, supervise third‑party risk, and coordinate withBusiness and IT teams to meet policy and regulatory requirements while promoting a security-first culture.