Head of Cloud Security - Data & Agentic Platform

L'Oréal; Saint-Ouen-sur-Seine; Sur place; EUR 120 000 - 160 000; Plein temps

Résumé du poste

L’Oréal is seeking a hands-on cloud security leader to secure the Data Platform on Google Cloud and the Agentic AI Platform, shaping security-by-design services and driving AI-driven automation across the Group.

You’ll lead a security team, mentor across Zones, Métiers and Divisions, and define enterprise security architecture standards while partnering with stakeholders to enforce least privilege and resilient data protection.

Qualifications

• 7+ years in cloud security or security engineering with leadership experience.
• Strong hands-on skills in GCP and Python.
• Deep knowledge of IAM, VPC-SC, Security Command Center, KMS, Secret Manager.
• Experience designing disaster recovery and data protection controls.
• Experience with Terraform, policy-as-code (OPA/Rego) and CI/CD workflows.
• Familiarity with Cloud Audit Logs, SIEMs and security AI systems.

Responsabilités

• Lead, mentor and grow the security team; prioritize tasks and support stakeholders.
• Design and enforce GCP access controls; enforce least privilege.
• Embed security into the Data Platform lifecycle and define security standards.
• Operate monitoring and alerting to detect compliant resources and drive remediation.
• Harden the Agentic Platform: authentication, guardrails and MCP assessments.
• Run rigorous code reviews and drive AI-driven security innovation.
• Communicate and enforce security policies across Zones, Métiers and Divisions.

Connaissances

Leadership

GCP Expertise

Python

IAM & access control

Security by design

CI/CD

Outils

Terraform

OPA/Rego

Cloud SecOps

SIEM

GCP Security Command Center

Description du poste

L’Oréal is seeking a hands-on cloud security leader to secure the Data Platform on Google Cloud and the Agentic AI Platform, shaping security-by-design services and driving AI-driven automation across the Group.

You’ll lead a security team, mentor across Zones, Métiers and Divisions, and define enterprise security architecture standards while partnering with stakeholders to enforce least privilege and resilient data protection.