{"id":2037346,"url":"https://alion.io/job/loreal-global-cybersecurity-risk-manager","title":"Global Cybersecurity Risk Manager","company":{"id":1047779,"name":"L'Oréal","domain":"loreal.com","url":"https://alion.io/company/loreal-3","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Radancy","truth_index":{"grade":"B","score":81,"open_postings":20,"ghost_share":0,"stale_share":0.95,"repost_share":0,"time_to_fill_p50_days":18,"computed_at":"2026-10-10T05:45:15Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Saint-Ouen-sur-Seine, France"],"countries":["FR"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":42000,"max_usd":84000,"period":"year","method":"role_country_seniority_unknown","sample_n":95},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false}],"status":"live","first_seen_at":"2026-09-25T00:00:00Z","employer_posted_date":"2026-09-25","last_verified_at":"2026-10-11T22:24:39Z","board_verified":true,"closed_at":null,"days_open":17,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":17},"description":"Hello, we’re L’Oréal. We're not just building brands, we're shaping how the world experiences beauty (and it takes a lot of cool jobs to do it). Intrigued? Keep reading, this might be the opportunity you've been searching for.\nA Day in the Life\nCybersecurity is the fundamental pillar of L’Oréal’s digital business resilience. Reporting to the Head of Cyber Governance, Risk & Compliance, your mission is to architect and participate to the L'Oréal’s Risk-Based Cyber Transformation. You will bridge the gap between technical posture and business impact by moving the cyber organization toward a data-driven cyber risk management model.\nWithin the Group Cybersecurity Governance, Risk and Compliance team you will:\nStrategic Decision Support & Intelligence\nAct as a strategic partner for the leadership team, translating technical cyber indicators into a clear business risk posture.\nDefine and operationalize the Group’s cyber risk appetite statements, ensuring business decisions remain within agreed security thresholds.\nDesign and deploy a dashboard of Key Risk Indicators (KRIs) to provide a comprehensive view of global risk exposure.\nDeliver and present global cyber heatmaps, highlighting critical exposure points and progress against risk reduction targets.\nGlobal Consistency & ERM Integration\nEnsure the seamless integration of cybersecurity risks into the Group ERM (Enterprise Risk Management) methodology, providing a consistent language for risk reporting at the highest level.\nHarmonize and synchronize cyber risk processes by leading a consistent 'One CSRM' program worldwide.\nDrive the convergence of GRC processes into a unified global risk calculation engine.\nOperational Risk & Process Excellence\nCrown Jewels Security: Ensure specific risk frameworks are applied to the most critical business assets.\nTPCRM Leadership (Third-Party Cyber Risk Management): Oversee the global strategy for managing supply chain and vendor risks. Ensure that third-party exposure is quantified and mitigated in line with the Group’s risk appetite.\nCIP (Cyber Into Project): Manage the deployment and enhancement of the CIP process.\nAdvanced Analytics & Strategic Foresight\nDesign and frame predictive risk assessment models to provide management team with strategic foresight.\nLeadership, Coaching & Operational Excellence\nDirect management of the global cyber risk management team.\nAct as a cyber risk liaison with relevant stakeholders.\nArchitect the integration of disparate security data sources into a centralized GRC tool.\nParticipate to the GRC global technology roadmap by selecting and implementing tools that support the transition from manual, point-in-time assessments to an automated, continuous risk monitoring platform.\nWe Are Looking For\nFirst and foremost, we love people that are curious, collaborative, eager to have an impact, proactive and who value innovation, autonomy, and team spirit.\nSecondly, in this specific position, it will be important for you to have:\nEducation: Master’s degree in Information Technology.\nProfessional experience: You are highly experienced in GRC with a significant experience in cybersecurity risk management, within a consultancy firm or a Fortune 500 company.\nTechnical skills:Experience in architecting or maturing risk management program.\nAbility to communicate risk credibly to both technical and non-technical audiences.\nDeep working knowledge of security frameworks and regulations (GDPR, NIS2 and CRA).\nStrong capability to translate the evolving threat landscape into specific business risks.\nCertifications (CRISC, CISM, CISSP) are a plus.\n\nManagement skills:Ability to manage internal and consultancy teams.\nAbility to communicate complex ideas effectively, in English and French, with international stakeholders and with Cybersecurity stakeholders within the Group.\n\nInterpersonal skills:Willingness to learn and develop new hard and soft skills.\nAbility to navigate within a fast-moving environment.\nStrong analytical skills.\nAbility to lead workshops.\nFluency in English is essential.\nPosition based at St-Ouen (93) with regular meetings within Paris area and rare business trip abroad.\n\nWhat’s In It For You\nA place for you to leave your comfort zone and grow beyond your potential (here, you’ll be encouraged to try new things and take risks!)\nReal responsibility from day 1, there’s no sitting on the sidelines at L’Oréal\nAn environment where people of every ethnicity, social background, age, religion, gender and sexual orientation as well as people with disabilities are accepted, can speak up, will thrive and are celebrated!\nA place where you can contribute to something bigger! Many of our brands have societal /environmental causes to make concrete difference\nWho We Are\nL’Oréal is present in 150 markets on five continents. For more than a century, L’Oréal has devoted itself solely to ‘Create beauty that moves the world’; it is now the industry world leader with €42 billion consolidated sales. Together, we solve complex challenges at scale, while making sure we stay committed to making the world a more inclusive and a better place for everyone & our planet.\nToday, L’Oréal includes over 9k experts in beauty tech, digital, data and e-comm and is constantly growing. Championing Beauty Tech, we invent the beauty of the future while becoming the company of the future. To achieve this ambition, L’Oréal continues to recruit diverse, innovative, skilled, and passionate minds in different tech domains such as Data, Digital, Cloud, Cyber Security, IT Architecture, DevOps, Applications, and Infrastructure.\nWe’re committed to guaranteeing inclusive recruitment processes and to advocating for hiring and promoting each candidate in an ethical and equitable way. The Group strictly prohibits discrimination against any applicant for employment because of the individual’s gender identity or expression, sexual orientation, visible and/or invisible disabilities, socio-economic and/or multicultural origins, health conditions, age, religion, or any other characteristics protected by law.","description_format":"text","description_chars":6069,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"master","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Security Compliance"],"lifecycle":[{"event":"open","at":"2026-10-07T16:33:43Z"}],"visa":[],"liveness":{"score":30,"band":"fade","label":"Fading","p_open":1,"p_active":0.402,"p_room":0.75,"age_days":15,"expected_fill_days":18,"reasons":["conf:1","stale_co","velocity","win:late","comp:brand"],"computed_at":"2026-10-10T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/loreal-global-cybersecurity-risk-manager","json_url":"https://alion.io/job/loreal-global-cybersecurity-risk-manager.json","meta":{"generated_at":"2026-10-12T01:18:17Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1461,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1047779},"rest":"https://alion.io/mcp/rest/get_company?id=1047779"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Floreal-global-cybersecurity-risk-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Floreal-global-cybersecurity-risk-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Floreal-global-cybersecurity-risk-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/loreal-global-cybersecurity-risk-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Floreal-global-cybersecurity-risk-manager"}]}