Cybersecurity Officer Central Europe

As Cybersecurity Officer, you will be responsible for implementing and overseeing a comprehensive cybersecurity program that ensures the protection of our organization's assets and data.

Governance:

• Lead the development and implementation of a robust cybersecurity framework that aligns with industry standards and best practices.
• Collaborate with IT directors and domain managers to ensure the effective communication and execution of cybersecurity policies and procedures.
• Facilitate regular meetings with IT director and domain managers to discuss cybersecurity-related matters and ensure alignment with organizational goals.

Risk Management / Security in Project:

• Identify, assess, and mitigate cybersecurity risks associated with our operations and ensure the implementation of appropriate controls to prevent data breaches and other security incidents.
• Evaluate the security posture of third-party vendors and ensure that they meet our cybersecurity requirements and standards.
• Develop and implement a comprehensive security program that includes risk management, vulnerability assessment, and penetration testing.
• Ensure that all security measures are in place before the deployment of new systems, applications, or services.

Compliance / Action plan follow-up:

• Ensure compliance with relevant laws, regulations, and industry standards, such as GDPR and PCI-DSS.
• Monitor and report on cybersecurity-related key performance indicators (KPIs) and controls to ensure that our organization is meeting its cybersecurity objectives.
• Act as the primary point of contact for internal and external auditors to ensure the effective communication and resolution of cybersecurity-related matters.
• Identify and remediate non-compliances, vulnerabilities, and other security weaknesses in a timely manner.

Cybersecurity Awareness / Education:

• Collaborate with internal communication teams to develop and implement cybersecurity awareness programs that educate employees on cybersecurity best practices and promote a culture of cybersecurity within our organization.
• Educate local teams on cybersecurity good practices and ensure that they have the necessary knowledge and skills to maintain a secure environment.

Resiliency:

• Ensure the existence of disaster recovery plans (DRP) for all critical assets and support in the definition and execution of DRP when required.
• Ensure the existence of a proper Crisis Management team.

Required skills and qualifications:

• A minimum of years of experience in cybersecurity is required.
• In-depth technical knowledge and experience in information technology, computing systems, network technologies, security operations, security technologies, systems integration, and the application of information security concepts.
• Proven leadership skills, as well as demonstrated proficiency in providing requisite oversight for information security operations and incident management.
• Excellent interpersonal skills, as well as an ability to interface efficiently with employees, senior leadership, and external partners, clients, and customers.
• Excellent verbal and written communication skills to technical and non-technical audiences of various levels in the organization.
• Fluency in English.
• A previous experience as IT project manager or information security manager is preferred.
• Master's degree in computer science, Information Security/Data Systems Management or a related field or discipline from an accredited college or university is a minimum required.
• Information security or risk management certifications (ISO/IEC , ) or Certified Information Systems Security Professional (CISSP) are preferred. Any additional certifications (e.g., CRISC, CISM, CISA, PMP, etc.) will be a plus for the application.

We offer:

• A friendly and dynamic work environment in the diverse environment of the market beauty leader.
• Plenty of opportunities to grow - cross-divisionally and functionally.
• Learningneverstops mindset: wide learning and e-learning package.
• Attractive benefits package including sports card, private health care, life insurance, pension package and internal boutique with a discount, product allocations.
• A modern and sustainable office in Warsaw city center.
• Community-engaged in Sports and CSR activities.

We are open for candidates with disabilities.

If you would like to participate in the above-mentioned recruitment process, it is mandatory to include in your resume the following clauses:

" I agree to the processing my personal data by L'Oréal Polska Sp. z o.o. with its registered office at Grzybowska , - Warsaw included in the CV, recruitment form and other application documents for the purpose and the scope necessary to carry out the recruitment process for the position of Payroll and Administration Specialist for Baltic countries"

I agree to the processing of my personal data included in the CV, recruitment form and other application documents for the use in the future recruitment by L'Oréal Polska Sp. z o.o. with its registered office at Grzybowska , - Warsaw.

Information clause

The controller of personal data is L'Oréal Polska Sp. z o.o with its registered office in Warsaw (-) at Grzybowska . Contact with the Data Protection Officer and additional information about the personal data processing carried out by the Company is possible via e-mail address: .

The processing of personal data is carried out for the purpose of the recruitment process in accordance with Article ()(c) of the General Regulation on Personal Data of April , (hereinafter GDPR). Data processing to a wider extent than resulting from the provisions of labour law, for the purposes of the future recruitment processes will be carried out on the basis of the given consent with accordance with Article ()(a) of the GDPR.

Your personal data will not be disclosed to other entities without your prior consent. Your personal data may be made available and at the request of entities authorized to do so under the law. The controller may, by means of a written contract, entrust to another entity the processing of your personal data to the extent and for the purpose necessary to perform the service. Your personal data will not be transferred to a third country/international organization.

Your personal data will be kept for a period of years from the end of the recruitment process – in which case these data will be processed until the consent is withdrawn.

You have the right to access their data, rectify, delete, object, limit processing and transfer. Your consent may be withdrawn at any time. Withdrawal of the consent will not affect the lawfulness of the processing of your personal data that was made on the basis of your given consent before its withdrawal. A declaration of withdrawal of the consent to the processing of your personal data should be sent to the e-mail or postal address indicated above.

You have the right to lodge a complaint to the President of the Personal Data Protection Office if you feel that the processing of your personal data violates the provisions of the GDPR.

Provision of personal data is voluntary but necessary for the participation in recruitment process. Failure to provision of personal data will result in the inability to participate in the recruitment process.

Puedes inscribirte en un máximo de tres ofertas en un período de días. No puedes retirar tu solicitud una vez enviada, así que asegúrate de elegir la posición que mejor se adapte a tus habilidades y aspiraciones.

---