Lead Security Manager (Remote)

Job description / Role

About the role

The position will have a leadership role over multiple critical customers with the support of other security managers.
Expected customers to lead are: Information security customers.

The role is to provide a value-added expert service centered around information and cyber security on behalf of the contract for critical customers.
Global ownership of customers’ cyber security and information risk details.

Ownership of security services lifecycle (define, assess, review, and improve) to meet customer’s security objectives.
Ensure compliance with customer security requirements, Orange security policies, and generally with industry best practices.
Customer relationship management to ensure customer satisfaction and loyalty.

Key Tasks and Responsibilities

– To develop and maintain a security program to manage customer’s requirements within contract scope; including identification of customer’s security objectives, assessment of existing controls, performing gap analysis, developing necessary measures to cover any gaps, and continually monitoring and improving the customer security posture.
– To support security managers serving critical customers and to build the necessary best practices.
– To interlock with L2 operations and L3 engineering in the benefit of all critical potential customers.
– To carry out technical vulnerability assessments and drive necessary actions to effectively control identified vulnerabilities.
– To manage and mitigate emerging threats compromising customer security.
– To respond rapidly and effectively to security incidents according to incident management processes, and to produce analysis reports with recommendations of remedial actions.
– To adopt a risk management approach to drive different actions in the security program in liaison with customer’s security authorities.
– To participate in internal/external audits, security-related tests, and reviews.
– To produce and present relevant reports to the customer security authorities and to internal operations management and security governance offices as required.
– To provide SME advice and guidance on the application and operation of all types of information security controls, and to work with operations managers to ensure the highest possible security standards are met and maintained.
– To participate with different operations teams to improve processes, tools, documentation models, and methodologies.
– Develop up-selling opportunities to meet new customer’s requirements and challenges.
– To keep up to date with emerging security trends, threats, best practices and standards (internal and external), regulations, and security-enhancing technologies.
– To manage other activities that may arise through evolution, growth, or restructuring.

– A Master’s or Bachelor’s degree in Computer Science, communications, electronics, or a related field.

Professional Experience:
– You are a mature security professional with over 14 years of experience; with a mixture of operational and customer-facing skills, and with an aptitude for a clear understanding of the application and operations of different information security domains.

Your hard skills include:
– Fortinet SDWAN, CISSP, CISM, CISA, SANS GIAC, ISO27K certifications or equivalent.
– Strong technical understanding and experience of at least two of the following:
– Network and end-point security
– Identity and access management (IAM)
– Network penetration testing and ethical hacking
– Threat and vulnerability management
– Security information and event management (SIEM), and SOC operations
– Security incident handling
– A good working knowledge of information security best practices, industry standards, and other related legislation.
– Strong background in IT and networking architectures and technologies.
– Good understanding of ITIL processes.

Your soft skills include:
– Exceptional leadership, teamwork, and collaboration skills.
– Excellent analytical and problem-solving abilities.
– Strong customer focus, able to respond quickly and effectively to customers’ requests, and able to adapt to a fast-changing customer landscape and challenges.
– Excellent verbal and written communication skills at all levels.
– Excellent data presentation and reporting skills.
– Experience working with virtual and remote team members and stakeholders.
– Results-oriented, high energy, self-motivated.
– Positive attitude towards learning and development demonstrated by a record of continuing professional development.
– Exposure to working within a matrix management environment in medium to large organizations.
– Excellent verbal and written English language skills.

Department
Global Delivery & Operations

Orange Business manages and integrates the complexity of international communications, freeing our customers to focus on the strategic initiatives that drive their business. Our extensive experience and knowledge in global communication solutions, together with our understanding of multinational business and local support in 166 countries and territories, ensure that our customers receive a consistent, global solution wherever they do business.

About the Company

Orange is one of the world’s leading telecommunications operators with sales of 43.5 billion euros in 2022 and 136,000 employees worldwide at 31 December 2022, including 75,000 employees in France. The Group has a total customer base of 287 million customers worldwide at 31 December 2022, including 242 million mobile customers and 24 million fixed broadband customers. The Group is present in 26 countries. Orange is also a leading provider of global IT and telecommunication services to multinational companies under the brand Orange Business.