Business Security & Data Privacy Officer

We are looking for a Business Security & Data Privacy Officer to join the Global Security Department within Orange Cyberdefense. This is a great opportunity to be part of an important internal function.

The right candidate combines a broad knowledge of data protection and business security with a service-oriented approach. You enjoy having contact with many parts of our business, sharing your knowledge and contributing to the development of our department.

In this role, you will not have hierarchical management responsibilities, but you will play a key role in the compliance of the offers offered to our clients and in the compliance of our suppliers with National and European regulations, ISO certifications and SOC2 assurance. In this role, you collaborate with various stakeholders, effectively communicating and driving initiatives forward.

Key Responsibilities

• Under the authority of the Business Security Officer of the Business Unit "Cyber with Business", Advise and support the Business Unit – Cyber with Business when it comes to Data Privacy and Security related topics.
• In cooperation with other members of the Global Security Department and under the functional authority of the DPO OCD, define and maintain the internal Security and Privacy framework.
• Act as a point of contact for data subject requests.
• Analyse, investigate, audit, and monitor that processing activities comply with the legal framework or the proper application of procedures, methods, or instructions relating to the protection of personal data
• Provide advice, upon request, regarding Data Protection Impact Assessments (DPIAs) or Privacy Impact Assessments (PIAs) and verify their implementation.
• Participate in awareness, and promote a "Data Protection and Privacy" culture
• Define and maintain, with the Orange Cyberdefense operational teams, the Generic Security Assurance Plans and certification for our cybersecurity products and services
• Maintain the procedures for managing client audits on information security and personal data protection commitments.
• Support the execution of internal and external audits.
• Provide support to the legal, sales, and pre-sales teams in responding to our clients' contractual requirements regarding information security and personal data protection (contractual clauses, questionnaires, security assurance plans, for example)

The ideal candidate will have

• Strong execution capability and the ability to move from framework to implementation.
• Experience in defining, formalizing and improving procedures.
• Strong communication and stakeholder management skills.
• A structured, pragmatic and solution-oriented approach
• A strong sense of ownership and follow-through