Area Security Officer

Strategy and Governance:

Collaborate with the Group CISO and Region Security Officer to implement cybersecurity strategies for the Area of the Region, aligned with the global security vision and business objectives

Participate and maintain the robust cybersecurity governance framework in the Area, ensuring alignment with NIST CSF, ISO 27001, and other relevant standards

Participate in meetings to provide updates on the Area’s security posture and initiatives

Risk Management and Compliance :

Oversee risk assessments and management processes for the assigned Area, integrating with the global risk management framework

Ensure compliance with relevant cybersecurity regulations and standards, including privacy laws (e.g., GDPR) applicable to Area operations

Collaborate with Legal & Compliance to address security-related regulatory requirements and audits

Business demand management

Help to manage the incoming requests from customers and third parties. Assess and categorize, fulfill. Report on volumes and trends

Take support and assistance from stakeholders, especially DxT central teams but also application owners and their corresponding organization and partners.

Go up the commercial stream: by engaging with S&M leads spot needs earlier and engage directly with the customers

Awareness and Behavior

Through scouting and studies identify the best practices and disruptive technics in relation to user behavior change

Stay tuned to last updates in user-related threats and compromise scenarios (e.g. AI, deep fakes…). Influence DxS compliance and Area program and initiatives

Engage with corporate communication team to foster culture change around cybersecurity

Governance, Risk & Compliance platforms ownership

Strong usage of LogicGate and KnowBe4 platforms

Grow and improve the platforms: implement modules and processes, introduce innovative features

Keep independent from DxS team managers

Reporting and Metrics:

Develop and maintain cybersecurity dashboards and KPIs for the assigned Area

Provide regular reports to the Group CISO, Regional SO and other relevant stakeholders on the Area’s security posture, incidents, and initiatives

Innovation and Research:

Stay informed about emerging cybersecurity threats, technologies, and best practices

Evaluate and recommend new security solutions and approaches for implementation in the assigned Area

Security Operations and Incident Response:

Work closely with DxT Team for the day-to-day cybersecurity operations in the Area, including monitoring, threat detection, and vulnerability management

Participate the incident response team for Area-related security incidents, coordinating with the global security team as needed

Oversee the implementation and maintenance of security technologies and solutions specific to Area needs

Policy and Process Management:

Ensure alignment with global policies and collaborate with DxS team

Push for improvement initiatives for security processes within the Area

Collaborate with HR and other departments to integrate security policies into Area operations and culture

Awareness and Training :

Oversee cybersecurity awareness and training programs for Area staff

Conduct or participate in regular briefings for executive leadership on cybersecurity matters affecting the Area

Foster a culture of security awareness and best practices among Area employees

Vendor and Third-Party Risk Management:

Oversee the security aspects of vendor relationships and third-party integrations specific to Area operations

Help to conduct security assessments of potential vendors and partners working with the Area

Highl level of French and English.

Our client is a global leader in Testing, Inspection and Certification (TIC), delivering high quality services to help clients meet the growing challenges of quality, safety, environmental protection, and social responsibility.

We are hiring an Area Security Officer (France) to join the team. Its a full remote position located in Spain.

This role is focus on leading cybersecurity efforts for the Area while aligning with global initiatives. It highlights the importance of collaboration with the Group CISO, Regional SO and other key stakeholders, as well as the need for strong guidance and strategic thinking in managing the unique security challenges of a multinational corporation.

Education:

Master’s degree in computer science, information technology, security and/or related field, or equivalent experience

Experience:

5+ years of experience in information security

Experience in managing or taking part in IT projects for large, complex organizations

Experience working in multinational environments and collaborating with global teams

Knowledge:

Understanding of cybersecurity frameworks (e.g., NIST CSF, ISO 27001) and their practical application

Knowledge of cybersecurity technologies, best practices, and emerging threats

Strong grasp of relevant regulations and compliance requirements

Understanding of business operations and how security integrates with various business functions

Skills and Abilities:

Eagerness to advocate for security and compliance

Strategic thinking and decision-making abilities

Communication skills, with the ability to effectively engage with both technical and non-technical stakeholders

Ability to influence and drive changes in the organization

Familiarity with project and program management

Adaptability and resilience in a fast-paced, evolving threat landscape