Cyber Resilience Project Manager

Unleash Your Potential at L'Oréal's Beauty Tech
For more than a century, L'Oréal has devoted itself solely to one business: Beauty. Present in 150 countries across five continents and with EUR42 billion consolidated sales, L'Oréal is the global industry leader. With 37 global beauty brands across four divisions, L'Oréal offers beauty for each covering all beauty categories and catering to all beauty desires. With the acquisition of the Australian brand Asop in 2023, the Group continues to expand its portfolio through targeted acquisitions as part of its drive to create the future of beauty.
Today, L'Oréal includes more than 2,000 tech positions and is constantly growing. Beauty Tech is changing the game and leading the shift towards new consumer realities and a digital disruption. Championing Beauty Tech, we invent the beauty of the future while becoming the company of the future.
Beauty Tech is how we know our consumers intimately, augmenting their beauty journeys with unparalleled diverse and sustainable experiences. Beauty Tech equips the Group with the key assets it needs to conquer this new world, where Tech has become strategic. With this ambition, L'Oréal continues to recruit diverse, innovative, skilled and passionate minds in different tech domains such as Data, Digital, Cloud, Cyber Security, IT Architecture, DevOps, Applications and Infrastructure.
YOUR FUTURE TEAM
Reporting to the Head of Cyber Resilience, the Cyber Resilience Project Manager will be responsible for implementing and maintaining cybersecurity resilience and recovery solutions, controls, and processes across organization in line with business objectives and strategies.
Will be also in charge of ensuring L'Oréal organizational preparedness, response, and recovery to a Cybersecurity critical event and will notably:

- Implement the IT Disaster Recovery Plan Strategy to minimize the interruption of L'Oréal's critical processes and safeguard business operations.
- Implement the Cyber Crisis Management across organization

This is a role that requires an individual with a strong knowledge in business continuity and cyber crisis management, able to communicate to leadership positions as well as the ability to work with different teams across the world with different cultures.
As Cyber Resilience Engineer, you also will be the key interface with Group & Zone CISOs, Heads of Cybersecurity Domains, CIOs and Group domain leads.
What a day in the life of the Cyber Resilience team looks like:
Cyber-Resilience
- Implement and oversee cyber-resilience controls, standards, and best practices. Support ongoing maintenance and development of the cyber-resilience Framework (DR plans, Crisis Management plans, playbooks, and tools).
- Promote cyber resilience as part of the wider Enterprise Risk Management (ERM) processes, improving awareness and understanding across the Group in order to minimize the potential impacts upon the business.
- Develop and maintain key stakeholder relationships across the Group (especially with Corporate functions team).
- Animate the Cyber Resilience Board with CTO and CSO office members for projects around cyber resilience & disaster recovery.

Disaster Recovery Plan
- Collaborate with Application Owners and infrastructure team to ensure proper Disaster Recovery Plan, as well as the crisis management plan definition.
- Ensure that the Disaster Recovery and Crisis Management Plans drafted within the organisation remain relevant and would be highly effective should a disaster be declared.
- Coordinate testing to provide assurance on the level of preparedness the organisation constantly demonstrates.

Cyber-Crisis
- Drive the Cyber crisis management workstreams, embedding the Group level response strategy and helping to ensure robust mechanisms are in place to respond to, and recover from potential cyber-crises.
- Conduct role-specific and global cyber risk trainings to L'Oréal's employees and management.

Cyber-Insurance
- Drive, with the Insurance and legal team, the Cybersecurity Insurance strategy, understanding the coverages available and developing the proposed levels of cover.
- Lead on the collation of information needed for submission to the brokers by the business.

Reporting & Dashboarding
- Keep abreast of emerging resilience requirements and provide an analysis of potential impacts to the Group.
- Produce reports and recommendations on Cyber resilience topics.

THIS IS WHAT YOU WILL NEED TO SUCCEED
First and foremost, we love people that are curious, collaborative, eager to have an impact, proactive and who value innovation, autonomy, and team spirit.
Secondly, in this specific position, it will be important for you to have:
**Technical & Professional Competencies**:

- A minimum of 5 years of experience in Cybersecurity is required.
- Having previous experiences in Business Continuity and Cyber Crisis Management in large companies is a must.
- Proven and effective leadership skills, as well as demonstrated p