Information Security Officer - AMEI & GDDS

How will you CONTRIBUTE and GROW?

As the AMEI DDS Information Security Officer your role will be to take the lead on Information Security for this scope, by advising teams regarding all forms of cyber risk and helping define plans to address them. As GDDS ISO, on top of standard ISO activities for the AMEI entity, you will act as the main point of contact of all other DDS ISOs using the GDDS. As such you will be responsible for the cybersecurity controls they may delegate to you. At the same time, as a cyber expert, you will be involved in projects/analyses of the entity and you will be responsible for cybersecurity controls for the entity.

You will be part of the Digital and IT Risk Management department in charge of all operational risks for D&IT worldwide.

You will have a direct reporting line to the Digital & IT Risks Director (in CDIO Office) as well as a functional reporting to the Group Information Security Officer (in GDSD).

You will be accountable for Governance, Risk Management and Compliance with IT security policies on AMEI DDS perimeter, and provide support to other ISO whom DDS/GDS leverage GDDS services i.e. you will be responsible for the cybersecurity controls they may delegate to you

As such, you will

• Convert Business risk into security needs using Air Liquide Cyber Risk Assessment methodology (DRMT) and manage Critical Digital Assets

• Deploy digital security framework for your entity and control its implementation (or deviations)

• Ensure awareness for cybersecurity for all users in your entity

• Ensure Applications security by training developers and project team on secure coding techniques (DevSecOps in particular)

• Manage Suppliers and Third-party entities cybersecurity

• Ensure timely remediation of vulnerabilities in your scope (following vendor alerts, scans results, patch management and pentests outputs)

• Ensure Disaster Recovery plans are in line with business requirements, document, implement and test those plans.

You will be supported in those missions by one direct report “cybersecurity specialist”.

___________________

Are you a MATCH?

• Min 7 years of strong experience in cyber security specifically in technical areas within DDS technical landscape.

• Education - Graduation in computer science or any technical Degree ( Preferably)

• Certification in CISA, CISSP, CRISK… is a plus

• Demonstrated strong leadership and risk-balanced approach to ensure teams implement necessary cybersecurity measures.

• Good capacity for synthesis, prioritization, communication: teaching, listening, ability to simplify.

• Autonomous, rigorous, organized and structured.

• C2 English required. Another language (French, other) is a plus.

#LI-KB1

Our Differences make our Performance

At Air Liquide, we are committed to build a diverse and inclusive workplace that embraces the diversity of our employees, our customers, patients, community stakeholders and cultures across the world. We welcome and consider applications from all qualified applicants, regardless of their background. We strongly believe a diverse organization opens up opportunities for people to express their talent, both individually and collectively and it helps foster our ability to innovate by living our fundamentals, acting for our success and creating an engaging environment in a changing world.