GLOBAL CYBERSECURITY GOVERNANCE AND AWARENESS LEAD

AboutNotre Raison d'être : Créer la beauté qui fait avancer le monde.Le désir de beauté est une force puissante qui nous fait avancer. La beauté ne se limite pas à l’apparence. Elle nous donne confiance en nous, en qui nous voulons être, et dans notre relation avec les autres.Depuis plus d’un siècle, nous exerçons ce métier unique : créateur de beauté. Notre but est d’offrir à tous, partout dans le monde, le meilleur de la beauté en termes de qualité, d’efficacité, de sécurité et de sincérité pour satisfaire tous les besoins et désirs de beauté dans leur infinie diversité.Et Parce Que Nous Sommes Le Leader De La Beauté, Nous Sommes Conscients Que Tout Ce Que Nous Faisons Peut Avoir Un Impact Significatif. C’est Pourquoi Nous Agissons PourInventer le futur de la beauté en ayant recours au meilleur de la technologie et de la science, inspirées par la nature.Faire avancer l’innovation sociale en offrant à nos collaborateurs le meilleur en matière de conditions de travail, de formation et de protection sociale.Construire une entreprise toujours plus inclusive qui reflète la diversité des consommateurs que nous servons.Nouer des partenariats durables avec nos clients et fournisseurs, basés sur la confiance et le développement mutuels.Œuvrer partout pour la cause des femmes et au développement des communautés qui nous entourent.Protéger la beauté de la planète en luttant contre le changement climatique, en respectant la biodiversité et en préservant les ressources naturelles.Job DescriptionWANT TO KNOW MORE ABOUT OUR BIG TECH TRANSFORMATION?L'Oréal is present in 130 countries on five continents. For more than a century, L'Oréal has devoted itself solely to one business: beauty; it is now the industry world leader with €42 billion consolidated sales.Today, L'Oréal includes more than 2000 tech positions and it's constantly growing. Especially with our ambition to become the #1 BeautyTech company, meaning inventing the beauty of the future while becoming the company of the future.BeautyTech will equip the Group with the key assets it needs to conquer this new world, where Tech has become strategic.To achieve this ambition, L'Oréal needs to continue recruiting diverse, innovative, skilled and passionate minds in different tech domains such as Data, Digital, Cloud, Cyber Security, IT Architecture, DevOps, Applications and Infrastructure.A Day In The LifeReporting to the Head of Governance, Risk & Compliance you will be in charge of organizing the Cybersecurity Governance and Awareness at Global level.He/she Is In Charge OfThe execution of all Governance and Awareness related projects.Managing the cybersecurity awareness & education program.Definition and maintenance of L'Oréal Group Cybersecurity Framework and communication on those requirements.This is a leadership role that requires an individual with a strong knowledge in GRC, able to communicate to leadership positions as well as the ability to work with different teams across the world with different cultures to align Cybersecurity priorities with key IT and Business objectives following a risk-based approach.Main MissionsGovernanceDesign and maintain the Cybersecurity Framework (policies, standards, and guidelines) to ensure it remains up to date with the evolving threat landscape and L'Oréal needs.Ensure applicability of the framework by ensuring that policies are realistic, technically feasible, and tailored to the operational constraints.Ensure the cybersecurity framework remains fully aligned with operational security activities and other cross-functional workstreamsWork with compliance team to design and implement the effective deployment strategy of security policies within Zones and PlatformsAssist cybersecurity managers in understanding and implementing the framework requirements within their specific contexts.Provide guidance and support in tracking the resolution of non-compliance issues or audit findings, ensuring long-term improvement.Ensure Cybersecurity Framework is well known and understood by the team.Report KPI.Awareness ProgramAs the lead for definition of Global cyber awareness strategy, worldwide deployment, and local champions coordination, your main activities are as follows:Identify and evaluate top Human risks to the organization and behaviors to strengthen the organization's security culture and mitigate these risks.Design, deploy, and maintain a comprehensive global security awareness program that ensures regulatory compliance and addresses identified human risks.Ensure, in partnership with internal communication and Learning team, that Group / Zone / Market Cybersecurity awareness initiatives are properly deployed everywhere and to all populations.Tailor communication and training plans to diverse internal audiences, ensuring content is relevant to specific roles and risk profilesenhance the cybersecurity e-learning catalog, ensuring high-quality, engaging, and up-to-date content.Creates and manages metrics that effectively measure the overall effectiveness of the Cybersecurity awareness program.Consolidate and analyze global and local awareness data to provide a unified view of performance and identify areas for continuous improvement.We Are Looking ForProfessional experience: You have a successful experience of at least 5 years in GRC (mainly awareness and/ or Governance activities) within a consultancy firm or a Fortune 500 companyTechnical SkillsStrong Cybersecurity knowledge, preferably supported by a worldwide certification in the field (CISSP, CISM, ISO 27001 LI/LA...)Strong knowledge of governance frameworks (e.g., COSO, or COBIT for IT governance).Good understanding of regulatory requirements like GDPR, NIS2 and CRAKnowledge of GRC platforms (e.g., ServiceNow) and Security Awareness toolsManagement SkillsAbility to manage consultancy teamsAbility to communicate complex ideas effectively, in English and French, with international stakeholders and with Cybersecurity stakeholders within the GroupInterpersonal SkillsWillingness to learn and develop new hard and soft skillsAbility to navigate within a fast-moving environmentStrong analytical skillsAbility to lead workshopsFluency in English is essentialPosition based at St-Ouen (93) with regular meetings within Paris area and rare business trip abroadWhat’s In It For YouA place for you to leave your comfort zone and grow beyond your potential (here, you'll be encouraged to try new things and take risks)Real responsibility from day 1, there's no sitting on the sidelines at L'OréalAn environment where people of every ethnicity, social background, age, religion, gender and sexual orientation as well as people with disabilities are accepted, can speak up, will thrive and are celebratedA place where you can contribute to something bigger Many of our brands have societal /environmental causes to make concrete differenceAdditional InformationContract Type: Full-TimeLocation: Saint-OuenPossible partial remote #J-18808-Ljbffr