Hermès Cybersecurity Awareness Lead

About Hermès

This prestigious fashion house, renowned for its timeless elegance and innovative designs, is a part of a leading global luxury conglomerate. The brand is committed to excellence and offers a dynamic environment where creativity and business acumen are equally valued.

Role & Responsibilities

• Define and secure approval for the Group’s multi-year cybersecurity awareness strategy, aligned with its risk map and frameworks.
• Build, present and manage the programme’s annual and multi-year budgets.
• Develop and manage the programme’s workload plan and annual roadmap.
• Lead a team of four internal and external contributors.
• Manage the programme platforms for content, simulated phishing and the LMS, including scoping, tenders and contractual performance monitoring.
• Lead programme governance and present results to executive bodies.
• Identify high-risk populations—including executives, executive assistants, finance, procurement, HR and privileged IT users—and design enhanced learning pathways for them.
• Design and operate the human-risk measurement framework (Cyberscore/human risk scoring), defining behavioural indicators, the calculation model and segmentation by population and entity.
• Ensure the measurement framework complies with GDPR requirements through an impact assessment with the DPO, data minimisation, works council information and a non-disciplinary educational purpose.
• Produce dashboards and reporting.
• Lead the simulated-phishing programme, developing realistic scenarios tailored to roles and regions, progressively increasing difficulty and providing remediation pathways.
• Design content in multiple formats and languages, including e-learning, video, in-store and workshop displays, and mobile formats for populations without fixed workstations.
• Ensure materials align with the Maison’s visual identity and aesthetic standards in close collaboration with communications teams (HDTI and Group).
• Adapt programmes for international deployment through cultural and linguistic tailoring and support from local contacts.
• Lead key initiatives, including Cyber Month, onboarding, executive sessions and awareness-focused crisis exercises.
• Develop and lead a community of cyber champions and local contacts across Maisons, regions and functions.
• Support managers in interpreting and using results for their areas.
• Design tailored programmes for specific populations, including executives and their entourages, boutiques, workshops, developers, service providers and temporary workers.
• Work closely with Internal Communications, the DPO, HR and cyber operations teams to ensure programme alignment.
• Monitor threats targeting the human factor—including social engineering, deepfakes, payment fraud and scams targeting retail—and adapt scenarios accordingly.
• Use feedback from the SOC and fraud teams to ground campaigns in observed incidents.
• Benchmark practices across the luxury sector and comparable international groups.

Qualifications

• At least 5 years of experience, including significant experience in cybersecurity awareness, change management or security communications in an international, multi-site environment.
• Experience in retail, luxury or mass-market retail is a strong asset.
• Strong understanding of social engineering threats.
• Proficiency with simulated-phishing and security e-learning platforms.
• Knowledge of ISO 27001, NIST CSF and NIS2 frameworks.
• Ability to design or oversee the production of high-quality content, including storytelling, video and design.
• Excellent written and verbal communication skills, including presenting to an executive committee.
• Creativity and aesthetic sensibility, with the ability to deliver programmes that meet the Maison’s standards.
• A pedagogical and empathetic approach, with the ability to engage artisans, sales associates and finance directors with equal impact.
• Ability to influence without hierarchical authority and to lead a network.
• Analytical rigour and results orientation.

Skills

Experience

At least 5 years, including significant experience in cybersecurity awareness, change management or security communications in an international, multi-site environment.

Education

Higher education at Bac+5 level in engineering, university studies, business or communications, with a cybersecurity specialisation.

Culture

The company fosters a collaborative and innovative culture, encouraging employees to push the boundaries of creativity while maintaining a strong commitment to sustainability and ethical practices.

About Cerulean

Cerulean is the definitive career portal for the global luxury industry. We match exceptional professionals with exclusive opportunities at the world's most prestigious brands. From haute couture and fine watchmaking to prestige beauty, hospitality, and boutique retail, Cerulean centralises luxury employment to help you find the career for which you were destined.