Infrastructure Cybersecurity Manager

Unleash Your Potential at L'Oréal's Beauty Tech
For more than a century, L'Oréal has devoted itself solely to one business: Beauty. Present in 150 countries across five continents and with EUR42 billion consolidated sales, L'Oréal is the global industry leader. With 37 global beauty brands across four divisions, L'Oréal offers beauty for each covering all beauty categories and catering to all beauty desires. With the acquisition of the Australian brand Asop in 2023, the Group continues to expand its portfolio through targeted acquisitions as part of its drive to create the future of beauty.
Today, L'Oréal includes more than 2,000 tech positions and is constantly growing. Beauty Tech is changing the game and leading the shift towards new consumer realities and a digital disruption. Championing Beauty Tech, we invent the beauty of the future while becoming the company of the future.
Beauty Tech is how we know our consumers intimately, augmenting their beauty journeys with unparalleled diverse and sustainable experiences. Beauty Tech equips the Group with the key assets it needs to conquer this new world, where Tech has become strategic. With this ambition, L'Oréal continues to recruit diverse, innovative, skilled and passionate minds in different tech domains such as Data, Digital, Cloud, Cyber Security, IT Architecture, DevOps, Applications and Infrastructure.
YOUR FUTURE TEAM
Group Cybersecurity teams ensure that Cybersecurity risks are properly managed within digital transformation of L'Oréal Group
**At worldwide level, Cybersecurity teams**:

- Build L'Oréal Cybersecurity strategy in partnership with business strategy and promote it
- Define Cybersecurity policies and procedures
- Support business projects in terms of Cybersecurity and data protection
- Manage Cybersecurity projects
- Increase Cybersecurity culture
- Manage Cybersecurity incidents and crisis
- Control the level of maturity within the Group

**Within Group Cybersecurity teams, you will be in charge to**:

- Ensure the Group Infrastructure implements the Cybersecurity strategy and policies to fit the stakes and risks
- Support Group Infrastructure projects by bringing Security assessment and expertise
- Ensure the management of Cybersecurity projects to enhance the maturity of the Group
- Strengthen Cybersecurity culture of Infrastructure teams
- Control and report on Cybersecurity maturity level at Infrastructure level

**What a day in the life of the Cybersecurity team looks like**:
Within the Group Cybersecurity team, you will be a major point of contact for Infrastructure Security topics and will:

- Contribute to the implementation of the Group Cybersecurity strategy and policies
- Implement risk analysis, propose related action plans and perform close follow-ups
- Lead Cybersecurity, infrastructure-related, projects
- Approve Security architecture and ad-hoc exceptions
- Perform a Cybersecurity watch
- Perform controls and contribute to the Cybersecurity reporting
- Build strong relationship with Infrastructure teams in a collaborative and constructive spirit

THIS IS WHAT YOU WILL NEED TO SUCCEED
First and foremost, we love people that are curious, collaborative, eager to have an impact, proactive and who value innovation, autonomy, and team spirit.
Secondly, in this specific position, it will be important for you to have:
**Education**: Master's degree in Information Technology
**Professional experience**: You have a successful experience of at least 8 years, split between Infrastructure and Cybersecurity within a consultancy firm or a Fortune 500 company
**Technical skills**:

- Strong Cybersecurity knowledge, preferably supported by a worldwide certification in the field (CISSP, CISM, ISO 27001 LI/LA)
- Strong knowledge of Infrastructure (e.g. Network, Server, Database, Cloud hosting, Workstations, O365)
- Experience in Privileged Access Management, Identity and Access Management, End point protections solutions
- Knowledge of Cybersecurity frameworks (NIST, ISO 27001, )
- Experience in risk analysis
- Strong skills in Excel and PowerPoint

**Management skills**:

- Ability to manage consultancy teams (i.e. penetration testing)
- Ability to communicate complex ideas effectively, in English and French, with international stakeholders and with Cybersecurity stakeholders within the Group

**Interpersonal skills**:

- Willingness to learn and develop new hard and soft skills
- Ability to navigate within a fast-moving environment
- Strong analytical skills
- Ability to lead workshops
- Fluency in English is essential
- Position based at St-Ouen (93) with regular meetings within Paris area and rare business trip abroad

LET US GIVE YOU 6 OTHER REASONS TO JOIN US
**Joining L'Oréal means joining a company that**:

- Invests in Tech and positions its Tech teams at the heart of its digital transformation strategy.
- Allows its employees to have a real impact, to test their ideas, to innovate and to build our future.
- Offers a Hybrid Wor