L'Oreal

OVERVIEW

The NA & SAPMENA Zone Security Operations (SecOps) Lead oversees IT security budget, strategy, and audits for their zone. They implement and adapt the security operations framework and standards from the Group SecOps Lead and align and collaborate with other Zones and business domains. The Zone SecOps Lead manages security operations services, such as security monitoring, incident response, vulnerability management, threat intelligence, and security awareness. They also guide and support other Zone IT teams and stakeholders on security operations matters. 

KEY JOB ACCOUNTABILITIES

• Lead the IT Disaster Recovery management and serve as the focal point for all security program project, controls and compliance-related topics within Infra
• Organize, prepare, and lead the Infrastructure Security Committee
• Serve as point-of-contact and escalation point for IT security and topics for Local, Zone, and Group Infra teams
• Lead and oversee the Infrastructure IT Security team
• Accountable for IT Security Project Implementation within Infra
• Define, prepare, lead, communicate, and report the IT Disaster Recovery for applications managed within Infra
• Perform IT Security controls, report and follow the remediation with the accountable team
• Responsible for the pre-requisite implementation actions on vulnerability scans within Infra
• Coordinates vulnerability remediation activities in collaboration with relevant IT security teams and suppliers
• Contributes to the execution of IT Security audits and coordinates remediation actions
• Organize the implementation of the supplier security plan with the relevant Infrastructure suppliers
• Monitor the IT security control plan and perform the defined security controls
• Ensure the respect of the IT security policy, norms, and standards within relevant Infra teams
• Contribute to the definition and implementation of the contractual framework for the security scope of each service provider
• Define and review the IT security budget and with regards to the IT security strategy and relevant audits
• Drive changes originating from the Group SecOps Lead across the zone, and submit zone-specific requirements to Group SecOps Lead
• Align with the processes, standards, policies and tooling set by the Group SecOps Lead
• Identify and implement continuous improvement opportunities for security operations in the Zone
• Assess incoming Cybersecurity demands for Technologies & Infrastructures and ensure solutions are being proposed for functional needs that are not yet covered in line with the overall system coherence
• Develop and maintain effective relationships and communication with internal users and/or external suppliers
• Identify and resolve essential Cybersecurity functionality gaps
• Produce and maintain Cybersecurity KPI’s for all Infrastructure related topics

QUALIFICATIONS

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related field, or equivalent work experience
• Minimum 5 years of experience in security operations, preferably in a multinational organization
• Strong knowledge of security operations frameworks, standards, and best practices, such as NIST CSF, ISO 27001, and CIS Controls
• Proficient in some security operations tools and technologies, such as SIEM, SOAR, EDR, NAC, and DLP
• Broad understanding of infrastructure related topics including Cloud platform, networking and endpoint solutions
• Excellent communication, collaboration, and leadership skills
• Ability to work in a fast-paced and dynamic environment.

PROFESSIONAL & TECHNICAL COMPETENCIES

FACILITATES KNOWLEDGE MANAGEMENT & EXPERTISE TRANSMISSION

• Rapidly acquires new knowledge on IT solutions and keeps constantly updated of technological opportunities & market trends in his/her field
• Organizes at his/her level the relevant transmission of the technical and/or project management skills and “know how”

DEMONSTRATE ENTREPRENEURSHIP

• Ability to demonstrate innovative thinking
• Ability to appreciate and propose new ideas, processes and solutions, while keeping a pragmatic eye

DECODE AND INFLUENCE

• Clarifies and simplifies technical concepts / solutions to facilitate action and decision making
• Listens actively to his partners/clients, to decode needs, qualify them properly and transform them in relevant solutions
• Takes change management and communication initiatives to facilitate the implementation of solutions and users satisfaction

ENABLE COOPERATION AND COLLABORATION

• Ability to develop collaborative/cooperative working
• Ability to work in a team with members from different expertise, places and cultures
• Ability to achieve collective goals

UNDERSTAND L'ORÉAL SYSTEMS AND TECHNOLOGY

• Rapidly acquires new knowledge on IT solutions and keeps constantly updated of technological opportunities & market trends in his/her field
• Organizes at his/her level the relevant transmission of the technical and/or project management skills and “know how”
• Knowledge of group wide specific Infrastructure (as applicable to specific role)
• Knowledge of the emerging and new infrastructure technologies

ABILITY TO INSPIRE / DEVELOP AND MANAGE A TEAM 

• Ensure development of expertise
• Ability to lead change in business on IT taking into account structural and cultural issues and monitoring the impact
• Expertise and support organizational changes
• Strong ability to work independently and drive others

UNDERSTAND L'ORÉAL BUSINESS

• Ability to understand overall business strategy, long term user/ customer needs
• Ability to translate into IT Strategy

UNDERSTAND L'ORÉAL SYSTEMS AND TECHNOLOGY

• Strong knowledge of key existing IT (applications and infrastructure) components
• Knowledge of the emerging and new technologies

ACTS AS A PROACTIVE BUSINESS PARTNER

• Imagines and promotes alternative options/solutions to match client needs
• Understands the “big picture” of the business, the operating model, the processes and the roles within the organizations

KNOWLEDGE OF PROJECT MANAGEMENT & METHODOLOGIES

• Knowledge of L'Oréal Project Management Methodologies (e.g. Agile)
• Understand approaches to define project steps and tools to set up action plans
• Rapidly acquires new knowledge on IT solutions and keeps constantly updated of technological opportunities & market trends in his/her field

KNOWLEDGE OF IT ARCHITECTURE

• Ability to develop / design an IT architecture
• Development of best practices and ability to use knowledge in various technology areas to build the architecture
• Strong knowledge of key existing IT (applications and infrastructure) components

UNDERSTAND L'ORÉAL SYSTEMS AND TECHNOLOGY

• Strong knowledge of key existing IT (applications and infrastructure) components
• Knowledge of Cybersecurity best practices
• Knowledge of the emerging and new technologies

L'ORÉAL COMPETENCIES

• INNOVATOR
• STRATEGIST
• PEOPLE DEVELOPER
• INTEGRATOR
• ENTREPRENEUR