Area Security Officer

Strategy and Governance: Collaborate with the Group CISO and Region Security Officer to implement cybersecurity strategies for the Area of the Region, aligned with the global security vision and business objectives Participate and maintain the robust cybersecurity governance framework in the Area, ensuring alignment with NIST CSF, ISO 27001, and other relevant standards Participate in meetings to provide updates on the Area¿s security posture and initiatives Risk Management and Compliance : Oversee risk assessments and management processes for the assigned Area, integrating with the global risk management framework Ensure compliance with relevant cybersecurity regulations and standards, including privacy laws (e.g., GDPR) applicable to Area operations Collaborate with Legal & Compliance to address security-related regulatory requirements and audits Business demand management Help to manage the incoming requests from customers and third parties. Assess and categorize, fulfill. Report on volumes and trends Take support and assistance from stakeholders, especially DxT central teams but also application owners and their corresponding organization and partners. Go up the commercial stream: by engaging with S&M leads spot needs earlier and engage directly with the customers Awareness and Behavior Through scouting and studies identify the best practices and disruptive technics in relation to user behavior change Stay tuned to last updates in user-related threats and compromise scenarios (e.g. AI, deep fakes¿). Influence DxS compliance and Area program and initiatives Engage with corporate communication team to foster culture change around cybersecurity Governance, Risk & Compliance platforms ownership Strong usage of LogicGate and KnowBe4 platforms Grow and improve the platforms: implement modules and processes, introduce innovative features Keep independent from DxS team managers Reporting and Metrics: Develop and maintain cybersecurity dashboards and KPIs for the assigned Area Provide regular reports to the Group CISO, Regional SO and other relevant stakeholders on the Area¿s security posture, incidents, and initiatives Innovation and Research: Stay informed about emerging cybersecurity threats, technologies, and best practices Evaluate and recommend new security solutions and approaches for implementation in the assigned Area Security Operations and Incident Response: Work closely with DxT Team for the day-to-day cybersecurity operations in the Area, including monitoring, threat detection, and vulnerability management Participate the incident response team for Area-related security incidents, coordinating with the global security team as needed Oversee the implementation and maintenance of security technologies and solutions specific to Area needs Policy and Process Management: Ensure alignment with global policies and collaborate with DxS team Push for improvement initiatives for security processes within the Area Collaborate with HR and other departments to integrate security policies into Area operations and culture Awareness and Training : Oversee cybersecurity awareness and training programs for Area staff Conduct or participate in regular briefings for executive leadership on cybersecurity matters affecting the Area Foster a culture of security awareness and best practices among Area employees Vendor and Third-Party Risk Management: Oversee the security aspects of vendor relationships and third-party integrations specific to Area operations Help to conduct security assessments of potential vendors and partners working with the Area Requisitos del puesto: Education: Master¿s degree in computer science, information technology, security and/or related field, or equivalent experience Experience: 5+ years of experience in information security Experience in managing or taking part in IT projects for large, complex organizations Experience working in multinational environments and collaborating with global teams Knowledge: Understanding of cybersecurity frameworks (e.g., NIST CSF, ISO 27001) and their practical application Knowledge of cybersecurity technologies, best practices, and emerging threats Strong grasp of relevant regulations and compliance requirements Understanding of business operations and how security integrates with various business functions Highl level of French and English. Skills and Abilities: Eagerness to advocate for security and compliance Strategic thinking and decision-making abilities Communication skills, with the ability to effectively engage with both technical and non-technical stakeholders Ability to influence and drive changes in the organization Familiarity with project and program management Adaptability and resilience in a fast-paced, evolving threat landscape Formación: Grado Idiomas: Francés : C1 , Inglés : C1 Conocimientos: gestión de auditoria y seguridad de la información normas iso 27001 Experiencia: 5 años