Global Cybersecurity Manager

Unleash Your Potential at L'Oréal's Beauty Tech

For more than a century, L’Oréal has devoted itself solely to one business: Beauty. Present in 150 countries across five continents and with €42 billion consolidated sales, L'Oréal is the global industry leader. With 37 global beauty brands across four divisions, L'Oréal offers beauty for each covering all beauty categories and catering to all beauty desires. With the acquisition of the Australian brand Aēsop in 2023, the Group continues to expand its portfolio through targeted acquisitions as part of its drive to create the future of beauty.

Today, L’Oréal includes more than 2,400 tech people and is constantly growing. Beauty Tech is changing the game and leading the shift towards new consumer realities and a digital disruption. Championing Beauty Tech, we invent the beauty of the future while becoming the company of the future.

Beauty Tech is how we know our consumers intimately, augmenting their beauty journeys with unparalleled diverse and sustainable experiences. Beauty Tech equips the Group with the key assets it needs to conquer this new world, where Tech has become strategic. With this ambition, L'Oréal continues to recruit diverse, innovative, skilled and passionate minds in different tech domains such as Data, Digital, Cloud, Cyber Security, IT Architecture, DevOps, Applications and Infrastructure.

YOUR FUTURE TEAM : O+O – SHAPING THE FUTURE OF OMNICHANNEL BEAUTY

This position is part of O+O (Online + Offline) Group Cybersecurity Team.

O+O refers to the strategic integration of digital and physical touchpoints into a single ecosystem, to provide a unified and seamless experience across every consumer & customer interaction.

The Team works in very close collaboration with the Divisions and Zones, as well as with other L’Oréal functions such as Marketing, Finance, and more.

What a day in the life of the Omnisales Cybersecurity Manager looks like

Reporting to the O+O CISO, you will be responsible of all aspects of Information security and technology Risk Management for O+O Omnisales scope, including a major Cybersecurity transformation program with a worldwide impact (Titanium). It is a Leadership role that requires a strong technical background, as well as excellent communication skills to work jointly with Business and IT Teams in order to ensure compliancy to L'Oréal Information Security Policy and applicable laws and regulations, while enabling and facilitating the Business.

What You’ll Do

• Define and enforce a clear information security governance throughout your scope (animation of security committees, etc…)
• Jointly with the Business and IT Teams, ensure L'Oréal Integration of Security in Projects methodology is properly applied
• Follow-up on Third Party Cybersecurity Risk Management: in particular, work closely with legal and purchasing teams to ensure appropriate integration of security requirements at the earliest stages of Third Parties Selection and contracting
• Proactively identify and mitigate information security risks throughout the lifecycle of L'Oréal Omnisales assets
• Manage security exceptions and formally document risk acceptance and associated compensatory measures
• Lead and drive Titanium Retail Cybersecurity program jointly with infrastructure and IT O+O Omnisales Teams, both at global and zone level
• Participate in O+O Cybersecurity committees preparation and presentation
• Manage regulatory compliance jointly with the concerned teams (Data Privacy, etc.)
• Follow-up on compliancy and security KPIs and put in place appropriate action plans to continuously improve these KPIs
• Follow-up on Threat and Vulnerability Management process and related remediation plans
• Ensure prompt and close follow-up of security incidents, jointly with L'Oréal CSIRT
• Act as a Cybersecurity evangelist, designing and leading engaging awareness sessions for diverse audiences
• Contribute to L'Oréal O+O Cybersecurity Community

THIS IS WHAT YOU WILL NEED TO SUCCEED

First and foremost, we love people that are curious, collaborative, eager to have an impact, proactive and who value innovation, autonomy, and team spirit.

We are looking for someone with at least 10 years of experience in information security in similar roles.

Required Skills

• Strong technical background in IT security
• Excellent interpersonal skills
• Good knowledge of Risk Management standards
• Good knowledge of domain-specific and security-related regulations and standards such as GDPR and PCI-DSS
• Excellent spoken/written English (international context)
• Rigorous and organized mindset
• Team Management Experience (particularly Transversal Team Management)

In this specific position, it will be important for you to have Cybersecurity cer