Senior Information Security Compliance Officer

Job description / Role

- Monitor compliance with the security standard and policies and, if needed, set up an improvement plan.
- Risk assessment and implementation of adequate risk management and continuity assurance practices
- Interaction with the Customer Security Officer - Day to day support: technical advices, workshops, participation to Change Advisory Boards etc ...
- Management of relationships with security partners (internal to Orange and Customer)
- Monitoring of security services performance
- Provision of security compliance reporting
- Ensuring that all the Blueprints, detailed design solutions and implementation plans are compliant with Customer Policies
- Communicating to the OBS account team the current policies and their evolution,
- Collection and analysis of the information ( CERT, ... ) on potential IT Risks and threats which can impact Customer Business activities
- Recommendations, alerts and leading of crisis plans
- Collection and analysis of the information on potential risks and threats, which can impact the Services delivered by Orange
- Act as Orange Business Services representative with respect to inquiries from the client, regarding the enterprise's security strategy.
- Develop specific procedures for effective security for dedicated environments.
- Develop and monitor formal procedures for reporting information security incidents and investigations within the Orange account team.
- Arrange and provide information security education and training to Orange account team dealing with the project.
- Contribute to the security aspects of the design of systems.
- Assist to regular security or risk management meetings with the different security stakeholders within the client organization
- Work in close relationship with the audit department of the client to ease the auditing of the specific services ordered.
- Support the client in its compliances exercises by providing information, evidences or supporting the clients during their own audits.

About you
- Knowledge of information security management
- Audit skills: being audited and running audits.
- Being able to run compliance exercise
- Knowledge of applicable laws (especially the privacy laws)
- Risk: analysis, management and mitigations
- Good communication skills with technical and CxO profiles
- Good knowledge of OBS processes and OBS security organization
- Technical knowledge: Firewall, network, OS Security....Typically a focus on the technology used for the client is needed.
- Project management (basic skill)
- Knowledge of security and audit standards: ISAE 3402, ISO 27001, SOC 2 (As standards are evolving this must be adapted to the current requested standards)
- Understanding and evaluation of security threats.
- Vulnerability management.
- Business continuity and Disaster recovery
- Fluent in English
- Strong and proven consulting skills.
- Minimum 8 years related work experience in customer facing organizations within the telecom or IT industry
- Effective Executive Management level communication
- Outstanding verbal, written, and presentation skills with track record of effective Executive Management communication
- Business driven and results-oriented.
- Strong and proven leadership skills.
- Strong team player
- Excellent commercial and business understanding

Certifications
- Required: CISM, CRISC
- Advised: CISA, CISSP,
- Certification in Data privacy is a plus.

department
Orange Business International

Orange Business manages and integrates the complexity of international communications, freeing our customers to focus on the strategic initiatives that drive their business. Our extensive experience and knowledge in global communication solutions, together with our understanding of multinational business and local support in 166 countries and territories, ensure that our customers receive a consistent, global solution wherever they do business.

About the Company

Orange is one of the world’s leading telecommunications operators with sales of 43.5 billion euros in 2022 and 136,000 employees worldwide at 31 December 2022, including 75,000 employees in France. The Group has a total customer base of 287 million customers worldwide at 31 December 2022, including 242 million mobile customers and 24 million fixed broadband customers. The Group is present in 26 countries. Orange is also a leading provider of global IT and telecommunication services to multinational companies under the brand Orange Business.