Hello, we’re L’Oréal. We're not just building brands, we're shaping how the world experiences beauty (and it takes a lot of cool jobs to do it). Intrigued? Keep reading, this might be the opportunity you've been searching for.

A Day in the Life

As our Cybersecurity Manager for Data & AI, based in our Beauty Tech hub in Saint-Ouen, you will join the Data and Artificial Intelligence cybersecurity domain. Your mission is to support the Beauty Tech Data Platform in delivering data-centric usages and the Beauty Tech Agentic Platform in innovating through new AI use cases. You will secure our cutting-edge platforms, hosted on Google Cloud Platform, while enabling them to explore new technologies.

You will be responsible for all aspects of information security and technology risk management for your scope. 

Your key responsibilities will include:

• Defining and enforcing a clear information security governance throughout your scope.
• Ensuring L’Oréal's "Integration of Security in Projects" methodology is properly applied with Business and IT Teams.
• Following-up on Third-Party Cybersecurity Risk Management, working closely with legal and purchasing teams.
• Proactively identifying and mitigating information security risks throughout the lifecycle of L’Oréal assets.
• Managing security exceptions and formally documenting risk acceptance.
• Following-up on threat and vulnerability management processes and their related remediation plans.
• Ensuring a prompt and close follow-up of security incidents, jointly with L’Oréal CSIRT.
• Acting as a Cybersecurity evangelist, designing and leading engaging awareness sessions.

We Are Looking For

You are a curious, collaborative, and proactive leader with a talent for securing innovative, data-rich environments. You are eager to have an impact in a fast-paced, global setting and value both innovation and autonomy.

You're a great match if you have:

• Experience: At least 5 years of experience in information security in similar roles.
• Technical & Risk Knowledge: A strong technical background in IT security, with good knowledge of Risk Management standards and regulations like GDPR.
• Leadership & Influence: Excellent interpersonal skills with experience in transversal team management.
• Project & Process Skills: Knowledge of project management methodologies and experience in Third-Party Security Management.
• Language Skills: Excellent spoken and written English for our international context. Security certifications like CISM or CISSP are a plus.
• Mindset: A rigorous, organized, and curious approach. You may not be an expert in all areas, but you show great curiosity in understanding the non-mastered ones.

What’s In It For You

• A place for you to leave your comfort zone and grow beyond your potential (here, you’ll be encouraged to try new things and take risks!)
• Real responsibility from day 1, there’s no sitting on the sidelines at L’Oréal
• An environment where people of every ethnicity, social background, age, religion, gender and sexual orientation as well as people with disabilities are accepted, can speak up, will thrive and are celebrated!
• A place where you can contribute to something bigger! Many of our brands have societal /environmental causes to make concrete difference

Who We Are

L’Oréal is present in 150 markets on five continents. For more than a century, L’Oréal has devoted itself solely to ‘Create beauty that moves the world’; it is now the industry world leader with €42 billion consolidated sales. Together, we solve complex challenges at scale, while making sure we stay committed to making the world a more inclusive and a better place for everyone & our planet.

Today, L’Oréal includes over 9k experts in beauty tech, digital, data and e-comm and is constantly growing. Championing Beauty Tech, we invent the beauty of the future while becoming the company of the future. To achieve this ambition, L’Oréal continues to recruit diverse, innovative, skilled, and passionate minds in different tech domains such as Data, Digital, Cloud, Cyber Security, IT Architecture, DevOps, Applications, and Infrastructure.

We’re committed to guaranteeing inclusive recruitment processes and to advocating for hiring and promoting each candidate in an ethical and equitable way. The Group strictly prohibits discrimination against any applicant for employment because of the individual’s gender identity or expression, sexual orientation, visible and/or invisible disabilities, socio-economic and/or multicultural origins, health conditions, age, religion, or any other characteristics protected by law.