Product Owner PKI

Product Owner PKI

Auchan Retail International - ARI - is hiring a PKI Product Owner within its Digital Defense domain within the International Cybersecurity Team.

The technical topics managed by this team include: ActiveDirectory Security, DevSecOps, Endpoints & Servers hardening, Vulnerability Management, etc.

About Auchan Retail International cybersecurity strategy

Auchan Retail cybersecurity strategy is endorsed by top management. Cybersecurity is named as a mandatory component of the information system.

As a consequence, ARI Cybersecurity team:

• Maintains the international cybersecurity framework (the rules)
• Delivers operational cybersecurity services (e.g. vulnerability scanner, EDR, SOC), mainly as a service center
• Monitors and report global cybersecurity posture
• Operates the cybersecurity of the international components technically Under Auchan Retail International responsibility.

About Auchan Retail's Corporate digital security team

Please trust us, we are a funny team of 50 people… This well being is confirmed each week with our famous lunch where we will remind you to pay for a glass if you forget it ;)

This funny team is organized in matrix with 2 "IT delivery" departments and 4 "security

departments":

• Operations domain, in charge on delivering the right quality of the operational service we deliver (e.g. ensure IAM availability is compliant with SLAs)
• Projects domain, in charge of deploying the IT solutions wherever it's planned to be deployed (e.g. ensure IAM is deployed in each and every BU)
• Governance, Risk, Compliance domain, in charge of the management of the global cybersecurity framework, resiliency, awareness & change management
• People & Identity, in charge of digital identity lifecycle management for all employees
• Digital Defense, in charge of infrastructure hardening and monitoring of cybersecurity posture (protect)
• Inspection & Incidents, in charge of monitoring of threats, detection and reaction to cybersecurity incidents (detect & react)

Missions

• French speaking & writing
• English speaking & writing You're interested in ?

You own a master degree in IT, or have significant experience in a similar job position ?

You have at least 5 years of experience in operational information security management with efficiency and ability to make things change.

You are part of the Digital Defense team. As both a security and product expert:

• You manages your product lifecycle

Product Owner PKI

Collection of requirements from Process Owners, Security Officers and interested parties

Definition and management of product roadmap, use cases, epics and user stories, in collaboration with a project manager if required

Management of interfaces with other products

Management of compliance with architecture rules

Qualification & validation of implementations

Providing of the right documentation, communication and training means for deployment team

Deployment of the pilot

Supporting of the deployment & the run teams to ensure the right delivery and the right QoS is done

In addition to this responsibility on the product, you also work as a security expert

Understanding both business stakes & security issues

Assess the risk

Define the most appropriate mitigation plan, in collaboration with interested parties

You will do your job in an international environment, working daily with business units over the world.

Skills

As you probably understood in the previous "missions" paragraph, here are the main skills that are expected from the candidate:

Technical skills Transversal skills

• Strong understanding of IT, both on-prem AND cloud
• Technical security concepts and principles

Secure architecture (system, network, application)

Hardening

Segmentation

Cryptography

Access Control

Secure development

…

• Security Operation Center management
• Security incident management
• Computer Emergency Response Team

Transversal skills

• Leadership

Inspire trust

Influence & convince

Motivate & mobilize

Support collaboration

• Excellence

Focus on customer

Bring vision & anticipation

Drive implementation with

determination

Aim for ambitious results

• Transformation

Demonstrate self-control

Take appropriate decisions

Constantly adapt & learn

Embody innovation

• Human skills
• Pragmatism
• Autonomy
• Communication
• Empathy

Languages

• French speaking & writing
• English speaking & writing You're interested in ?

You own a master degree in IT, or have significant experience in a similar job position ?

You have at least 5 years of experience in operational information security management with efficiency and ability to make things change.

You are a funny man/woman and want to join a team of security professionals in one of the biggest french companies with international journey ?

So Why are you still reading this job desc ? Apply

2 jours de télétravail par semaine