Business Security Officer

Job description / Role

about the role

As a key player in ensuring confidence in our information security management system, you will be the overall guarantor of the security of our cloud administration infrastructure. You will join the security office and take on the role of delegated CISO for your area (also known as Business Security Officer service). As a Business Security Officer service (BSO service), you'll be constantly on the lookout for threats that could impact your area of responsibility, and your expertise will be the subject of industry-recognized certifications.

At the crossroads of the key issues for the success of the cloud (security and reliability), the Business Security Officer is involved in a wide variety of activities, for which the qualities of analysis and flexibility are essential.

Would you like to find out more? Your mission is diverse (your expertise in all the different fields is not a prerequisite for your application):
- Carry out expert assessment and consultancy work (risk analysis, pentesting, vulnerability audits, etc.);
- Ensure that Orange builds and operates the service in accordance with management's security requirements. Act as an expert security advisor to operational teams,
- In particular, you will set up the necessary documentation and controls,
- Report on the status of the service in terms of security,
- Coordinate the management of security incidents,
- You raise awareness among operational staff and remind them of the safety rules to be followed,
- Helps to continuously improve Orange Cloud for Business security practices in conjunction with peers in a logic of control and continuous improvement (Plan-Do-Check-Act).

Specifically, you will carry out
- Risk analysis, vulnerability analysis, security assurance plan and indicator monitoring;
- Follow-up of external audits, implementation of security control points, reviews with cloud operational teams, awareness-raising for these same teams, security reviews, analysis of security incidents and architecture or process analyses for security improvement proposals;
- Follow-up of action plans linked to the various controls and analyses carried out.

This initial scope of responsibility will cover WAN LAN services.

English is essential for this position and French would be a differentiating skill, as Orange Business has an international dimension but a strong French footprint.

You have 4/5 years of higher education (engineering school or Master's degree in IT), but a first successful experience in cybersecurity is a major asset.

If your appetite for security and ability to communicate in English are prerequisites, your know-how in the following areas will be a considerable asset.
- CISSP, CISM or CISA, or equivalent
- Vendor technologies certifications are preferred such as Cisco, Fortinet, Palo Alto, etc.
- Good understanding of security methods like ISO 27K
- Good understanding of encryption and networking protocols
- Good understanding of ITIL processes.

In addition, interpersonal skills are essential to be able to work serenely and as part of a team, both with operational staff and with members of the safety office.

- Ability to meet and communicate with customers (technical & high-level postures)
- Understand customer's corporate and cultural needs and differences
- Customer's satisfaction oriented
- Ability to work in autonomously
- Ability to identify, pro-actively, problems and provide solutions to resolve them.
- Ability to provide a dashboard and documentation with a professional look and feel in accordance with customer expectations.
- Ability to provide advice, coordination, and leadership while in security crisis

About the Company

Orange is one of the world’s leading telecommunications operators with sales of 43.5 billion euros in 2022 and 136,000 employees worldwide at 31 December 2022, including 75,000 employees in France. The Group has a total customer base of 287 million customers worldwide at 31 December 2022, including 242 million mobile customers and 24 million fixed broadband customers. The Group is present in 26 countries. Orange is also a leading provider of global IT and telecommunication services to multinational companies under the brand Orange Business.