Assistant Vice President - Platforms Lead and Risk Management

Job Title

Assistant Vice President - Cybersecurity Platforms Lead and Risk Management

Corp IT, Cybersecurity

New York, NY (

Location:

80% New York City office, 20% New Jersey office)

CISO Americas

For more than a century, L’Oréal has devoted its energy, innovation, and scientific excellence solely to one business:
Beauty. Our goal is to offer each and every person around the world the best of beauty in terms of quality, efficacy, safety, sincerity and responsibility to satisfy all beauty needs and desires in their infinite diversity.

At L'Oréal, our IT teams design and build solutions to ensure high performance for all our business sectors by imagining new ways of doing things, from designing websites to building algorithms and predicting new trends.

They can be found leading teams towards a more connected and digitalized future in IT retail, e-commerce, CRM, data, AI, cybersecurity, Cloud and E-Marketing. You never stop learning at L'Oréal IT because things change at the speed of light! Come join our dynamic team!

As the Platforms Lead, you will report directly to the Americas CISO/VP and serve as a senior member of the Cybersecurity Leadership team. Your mission is to orchestrate and mature the cybersecurity posture across our business platforms (Operations & Finance, Corporate/HR, R&I, O+O) by leading a zone organization comprised of dedicated Business Platform Cybersecurity Risk Directors & Managers. You will manage a global scope, managing teams across the Americas Zone.

• Protecting Our Crown Jewels:
  You will play a crucial role in safeguarding the future of L’Oréal by protecting our core assets. You will steer the risk analysis framework, ensuring your team identifies critical assets and builds robust action plans to mitigate threats.
• Strategic Vision & Harmonization:
  You will develop and lead the implementation of a cohesive security strategy across all platforms, ensuring Group policies are consistently adapted and applied to meet both global standards and specific business needs.
• Empowering Leadership:
  You will lead, mentor, and empower your team, fostering their growth and ensuring they operate as effective strategic security partners within their respective domains.
• Executive Influence & Impact:
  You will leverage your expertise to influence and align with the highest levels of leadership. You will translate complex security challenges into strategic business-oriented discussions, ensuring alignment, securing support for critical initiatives, and driving transversal initiatives.
• Group-Level Strategic Contribution:
  Beyond your direct scope, you will be a key contributor to the Group's overall security vision and roadmap, working closely with the Cybersecurity Leadership team on transversal and forward-looking topics.
• Collaborative Leadership:
  You will work in close partnership with other members of the Cybersecurity Leadership team, including the Head of GRC, Head of Cyber Resilience, Global Tech Functions & Zone CISOs, and the CISO Office & Transformation Lead, to build and execute a unified and powerful Group security strategy.

• Ensure L’Oréal Group Cybersecurity policies are well known and applied in the Americas Zone.
• Ensure compliancy with Group Cybersecurity policy and global regulations / standards (e.g. PCI-DSS, GDPR, NIS2, CRA).
• Ensure coordination, with Group and Zone team, in case of audit and lead in case of some zone audits:
  Data Privacy audits, Internal audits, External audits, Financial audits.
• Ensure all Security exceptions are properly tracked and perform regular follow-up.

• Put in place proper…