Assistant Vice President - Platforms Lead and Risk Management

Job Title Assistant Vice President - Platforms Lead and Risk Management

Division: Corp IT, Cybersecurity

Location: New York, NY (Location: 80% New York City office, 20% New Jersey office)

Reports To: CISO Americas

Who We Are:

For more than a century, L'Oreal has devoted its energy, innovation, and scientific excellence solely to one business: Beauty. Our goal is to offer each and every person around the world the best of beauty in terms of quality, efficacy, safety, sincerity and responsibility to satisfy all beauty needs and desires in their infinite diversity.

At L'Oreal, our IT teams design and build solutions to ensure high performance for all our business sectors by imagining new ways of doing things, from designing websites to building algorithms and predicting new trends. They can be found leading teams towards a more connected and digitalized future in IT retail, e-commerce, CRM, data, AI, cybersecurity, Cloud and E-Marketing. You never stop learning at L'Oreal IT because things change at the speed of light! Come join our dynamic team!

What You Will Do:

As the Platforms Lead, you will report directly to the Americas CISO/VP and serve as a senior member of the Cybersecurity Leadership team. Your mission is to orchestrate and mature the cybersecurity posture across our business platforms (Operations & Finance, Corporate/HR, R&I, O+O) by leading a zone organization comprised of dedicated Business Platform Cybersecurity Risk Directors & Managers.

You will drive strategic impact through:

• Protecting Our Crown Jewels: You will play a crucial role in safeguarding the future of L'Oreal by protecting our core assets. You will steer the risk analysis framework, ensuring your team identifies critical assets and builds robust action plans to mitigate threats.
• Strategic Vision & Harmonization: You will develop and lead the implementation of a cohesive security strategy across all platforms, ensuring Group policies are consistently adapted and applied to meet both global standards and specific business needs.
• Empowering Leadership: You will lead, mentor, and empower your team, fostering their growth and ensuring they operate as effective strategic security partners within their respective domains.
• Executive Influence & Impact: You will leverage your expertise to influence and align with the highest levels of leadership. You will translate complex security challenges into strategic business-oriented discussions, ensuring alignment, securing support for critical initiatives, and driving transversal initiatives.
• Group-Level Strategic Contribution: Beyond your direct scope, you will be a key contributor to the Group's overall security vision and roadmap, working closely with the Cybersecurity Leadership team on transversal and forward-looking topics.
• Collaborative Leadership: You will work in close partnership with other members of the Cybersecurity Leadership team, including the Head of GRC, Head of Cyber Resilience, Global Tech Functions & Zone CISOs, and the CISO Office & Transformation Lead, to build and execute a unified and powerful Group security strategy.

Key Job Accountabilities

Policy & Compliance:

• Ensure L'Oreal Group Cybersecurity policies are well known and applied in the Americas Zone.
• Ensure compliancy with Group Cybersecurity policy and global regulations / standards (e.g. PCI-DSS, GDPR, NIS2, CRA).
• Ensure coordination, with Group and Zone team, in case of audit and lead in case of some zone audits: Data Privacy audits, Internal audits, External audits, Financial audits.
• Ensure all Security exceptions are properly tracked and perform regular follow-up.

Security in Project & Third-Party Risk Management:

• Put in place proper Governance Committee with IT and Business stakeholders to ensure Cybersecurity involvement as early as possible in the project lifecycle.
• Ensure Cybersecurity participation in Design Authority, Project portfolio committees or any ITBM governance committee when needed.
• Perform Cybersecurity assessment of all IT and Business projects, including the assessment of Third Parties involved, with regards to the Cybersecurity in Project Methodology and Third-Party Risk Management Methodology.
• Ensure proper documentation of all Cybersecurity assessments.
• Ensure follow-Up of the remediation of all recommendations / action plans defined during the assessment phase.
• Ensure proper management of our Risk Management tools and track our cybersecurity risk assessment

Cybersecurity Awareness and Education:

• Ensure Cybersecurity is included into induction trainings (or equivalent) for all new joiners (internal & external).
• Regularly perform some targeted awareness session to specific populations (Top Management, PAs, CDMO, Purchasing, Legal, Project Manager...).
• Ensure all Group initiatives on Cybersecurity awareness (newsletter, e-learning, phishing campaign, Cyberweek or Cybermonth) are correctly deployed on your perimeter.

Operational Excellence:

• Organize security committees with CIOs of the perimeters and relevant IT Domain managers to review Cybersecurity KPIs.
• Perform regular follow-up with DPO, purchasing & legal department on Third-Parties/partners assessments and perform regular cybersecurity reviews for critical vendors.
• Make sure that all remediations and vulnerabilities identified in your scope (TVM, bug bounties, pentests...) are correctly assigned and resolved in timely manner according to the Policies.

Resiliency

• Ensure critical applications are properly identified and documented.
• Ensure existence of Disaster Recovery Plans (DRP) for all critical assets.
• Define and plan regular crisis exercises with IT and business teams.
• Ensure proper Crisis Management team is in place.

Contribution to Zone & Group

• Be the main point of contact for all Group Cybersecurity initiatives and ensure proper deployment on his/her perimeter.
• Contribute to Group & Zone initiatives and especially to L'Oreal Cybersecurity Transformation program.
• Share best practices with peers.

As part of the L'Oreal Group Cybersecurity Leadership committee:

• Participate to the definition of L'Oreal Cybersecurity strategy.
• Provides vision and leadership for all strategic activities that drive cybersecurity's contribution to L'Oreal's key business initiatives.
• Participate to the identification of Group Cybersecurity priorities and transformation roadmap following a risk based approach.
• Participate to the definition and ensure implementation of L'Oreal Cybersecurity Framework and processes. Ensure L'Oreal keeps up with good practice and comply with main regulations within its requirements.

What We Are Looking For:

Required Qualifications:

An ambitious and visionary leader with the ability to navigate a complex, global organization. You combine deep cybersecurity expertise with outstanding executive presence and business acumen. Your ability to influence, communicate effectively, and manage senior stakeholders will be key to your success.

To be a great match, you have:

As an integral part of our culture at L'Oreal, wellness is at our core. We not only offer a generous Benefits Package (Medical, Dental, Vision, 401K), we also offer flexible time off, work from home days, and a pension plan! Additionally, you will have access to company perks such as Makeup, Skincare, and Fragrance! Employees receive a stipend for L'Oreal products as well as VIP Access to L'Oreal's Internal Shop for Discounted Products, and other perks such as Monthly Mobile Allowance, discounted gym memberships, and ERGs.

Additional Benefits Information As Follows:

Salary Range: $147,100 - $213,300 (The actual compensation will depend on a variety of job-related factors which may include geographic location, work experience, education, and skill level)

Don't meet every single requirement? At L'Oreal, we are dedicated to building a diverse, inclusive, and innovative workplace. If you're excited about this role but your past experience doesn't align perfectly with the qualifications listed in the job description, we encourage you to apply anyways! You may just be the right candidate for this or other roles!

We are an Equal Opportunity Employer and take pride in a diverse environment. We would love to find out more about you as a candidate and do not discriminate in recruitment, hiring, training, promotion, or other employment practices for reasons of race, color, religion, gender, sexual orientation, national origin, age, marital or veteran status, medical condition or disability, or any other legally protected status.

If you are a qualified individual with a disability or a disabled veteran, you may request a reasonable accommodation if you are unable or limited in your ability to access job openings or apply for a job on this site as a result of your disability. You can request reasonable accommodations by contacting [emailprotected]. If you need assistance to accommodate a disability, you may request an accommodation at any time.

Our Safe Together Plan: Your safety is our highest priority. We will proceed with caution and adhere to enhanced protection standards to ensure our sites are safe for all employees. We must all operate with the shared responsibility for each other's health & safety in mind.