Orange Cyberdefense
Orange Cyberdefense
Orange Cyberdefense is the Orange Group’s cybersecurity business unit, helping organizations worldwide manage digital threats through cybersecurity consulting, solutions, and services. Its work spans the full threat lifecycle, supported by more than 25 years of experience, a team of over 250 researchers and analysts, and 18 Security Operations Centers. Orange Cyberdefense serves clients across 160 countries and hires professionals in areas connected to cybersecurity, consulting, defense, threat intelligence, and security operations.

Business Security and Data Privacy Officer

Guide business security, privacy, and compliance at Orange Cyberdefense. Support GDPR, ISO, and SOC 2 work across audits, client assurances, and internal frameworks.

Description

  • Advise the Cyber with Business unit on data privacy and security matters.
  • Maintain the internal security and privacy framework with the Global Security Department and DPO OCD.
  • Serve as a contact for data subject requests.
  • Review and monitor processing activities to check compliance with legal requirements and data protection procedures.
  • Advise on data and privacy impact assessments, and verify that resulting measures are implemented.
  • Contribute to awareness initiatives and encourage a culture of data protection and privacy.
  • Develop and maintain generic security assurance plans and certifications for cybersecurity products and services.
  • Maintain procedures for client audits covering information security and personal data protection commitments.
  • Assist with internal and external audits.
  • Help legal, sales, and pre-sales teams address client contract requirements for information security and personal data protection.
  • Work with stakeholders to advance initiatives without direct management responsibility.

Requirements

  • Bachelor's degree or equivalent experience in information security, risk management, privacy, compliance, or a related field.
  • At least five years of relevant experience.
  • Strong knowledge of GDPR, DORA, NIS2, ISO 27001, and SOC 2.
  • Experience using GRC tools, dashboards, compliance reporting, and control monitoring.
  • Experience implementing and embedding processes and ways of working across cross-functional requirements.
  • Strong written and verbal communication skills.
  • ISO 27001 Lead Auditor or Implementer certification preferred.
  • ISO 27035 Risk Manager or Lead Risk Manager certification preferred.
  • Relevant certifications such as CISSP, CISM, CISA, or CRISC preferred.
  • Strong business understanding and the ability to apply privacy and security principles in a client-facing environment preferred.
  • Experience in a similar role preferred.
  • Ability to take a risk-based, pragmatic approach to prioritization and implementation preferred.

Related Jobs

Arkansas Blue Cross and Blue Shield

Remote Medical Claims Specialist

Arkansas Blue Cross and Blue Shield

Process medical claims that require manual review for Arkansas Blue Cross and Blue Shield, investigating benefits, eligibility, coding, audits, and processing issues. This full-time remote role is based in the United States.

Open
Great American Insurance Group

Senior Workers' Compensation Claims Specialist - Great American Insurance Group (Remote)

Great American Insurance Group
5,001 – 10,000 Employees
B2BInsurance

Handle complex workers’ compensation claims in California and Oregon for Strategic Comp, a specialty insurance provider. Investigate claims, set reserves, negotiate settlements, and guide cases to resolution in a remote role.

Open