Orange Cyberdefense
Orange Cyberdefense
Orange Cyberdefense ir Orange grupas kiberdrošības biznesa struktūrvienība, kas palīdz organizācijām visā pasaulē pārvaldīt digitālos apdraudējumus, nodrošinot kiberdrošības konsultācijas, risinājumus un pakalpojumus. Tās darbība aptver visu apdraudējuma dzīves ciklu, un to atbalsta vairāk nekā 25 gadu pieredze, vairāk nekā 250 pētnieku un analītiķu komanda, kā arī 18 drošības operāciju centri. Orange Cyberdefense apkalpo klientus 160 valstīs un pieņem darbā profesionāļus kiberdrošības, konsultāciju, aizsardzības, apdraudējumu izlūkošanas un drošības operāciju jomās.

Business Security and Data Privacy Officer

Guide business security, privacy, and compliance at Orange Cyberdefense. Support GDPR, ISO, and SOC 2 work across audits, client assurances, and internal frameworks.

Apraksts

  • Advise the Cyber with Business unit on data privacy and security matters.
  • Maintain the internal security and privacy framework with the Global Security Department and DPO OCD.
  • Serve as a contact for data subject requests.
  • Review and monitor processing activities to check compliance with legal requirements and data protection procedures.
  • Advise on data and privacy impact assessments, and verify that resulting measures are implemented.
  • Contribute to awareness initiatives and encourage a culture of data protection and privacy.
  • Develop and maintain generic security assurance plans and certifications for cybersecurity products and services.
  • Maintain procedures for client audits covering information security and personal data protection commitments.
  • Assist with internal and external audits.
  • Help legal, sales, and pre-sales teams address client contract requirements for information security and personal data protection.
  • Work with stakeholders to advance initiatives without direct management responsibility.

Prasības

  • Bachelor's degree or equivalent experience in information security, risk management, privacy, compliance, or a related field.
  • At least five years of relevant experience.
  • Strong knowledge of GDPR, DORA, NIS2, ISO 27001, and SOC 2.
  • Experience using GRC tools, dashboards, compliance reporting, and control monitoring.
  • Experience implementing and embedding processes and ways of working across cross-functional requirements.
  • Strong written and verbal communication skills.
  • ISO 27001 Lead Auditor or Implementer certification preferred.
  • ISO 27035 Risk Manager or Lead Risk Manager certification preferred.
  • Relevant certifications such as CISSP, CISM, CISA, or CRISC preferred.
  • Strong business understanding and the ability to apply privacy and security principles in a client-facing environment preferred.
  • Experience in a similar role preferred.
  • Ability to take a risk-based, pragmatic approach to prioritization and implementation preferred.

Saistītās vakances

Guidehouse

Remote ETL Developer

Guidehouse

Build and support enterprise ETL/ELT pipelines, data warehouses, and integration workflows for Guidehouse consulting services. Help deliver secure, governed, high-performance data solutions.

Atvērt
RTX

Senior Analytics Engineer, Aerospace and Defense

RTX

Develop Python-based analytics and integrate engineering data to support Collins Aerospace teams. Apply statistical and machine learning methods to inform product decisions and business intelligence.

Atvērt
Visma

Data Analytics Engineer — Visma, Hybrid in Portugal

Visma

Build dbt and BigQuery models, dashboards, and AI-assisted workflows for Visma’s business software ecosystem. Help deliver trusted, governed data for analytics and decision-making.

Atvērt