Shiseido Cyber GRC Manager

Role & Responsibilities

• Manage the Cyber GRC department and optimize its operations.
• Align cybersecurity activities with business objectives and assess cyber maturity.
• Define, produce and monitor monthly steering indicators (KRI and KPI).
• Draft and update security documentation, including policies, processes, rules, procedures and charters, in coordination with the relevant ecosystem.
• Improve internal methods, knowledge capitalization and cybersecurity department activity tracking, including deliverable organization, activity dashboards and assessment methods.
• Monitor developments across the cybersecurity remit.
• Analyze, map and monitor cyber risks.
• Secure business and IT projects involving information systems by gathering project, service-provider and system information; assessing it against internal and/or standard security frameworks; producing functional and technical risk analyses; reviewing contract security clauses; defining and monitoring project security audits; and preparing security summaries with recommendations and remediation actions.
• Assess and monitor third-party cybersecurity, and manage security exceptions.
• Monitor applicable standards and define the associated actions.
• Establish compliance dashboards and monitoring, including collection of supporting evidence.
• Conduct checks across the organization’s ecosystem to verify the deployment and application of cybersecurity directives.
• Support the internal audit team on cybersecurity audits.
• Manage internal projects for the cybersecurity department and handle requests requiring a cybersecurity perspective.
• Develop, coordinate and strengthen the cybersecurity liaison network in collaboration with IT teams.
• Assess the cybersecurity posture of subsidiaries and contribute to the effective rollout of cybersecurity initiatives across the network.
• Define the resources required for cyber-incident crisis management, including plans, procedures, key documents, and human and material resources.
• Work with internal and external stakeholders on projects to improve crisis-management preparedness.
• Support the Cyber Defense department in delivering training and exercises for people who may be involved in a cyber crisis.
• Participate in crisis-management teams and contribute to resolution during a cyber crisis.
• Contribute to cybersecurity department projects, including their effective deployment across subsidiaries.
• Participate in EMEA and global cybersecurity meetings, provide visibility on assigned topics and advise colleagues on theirs.

Qualifications

• Hold a five-year higher-education degree, with an engineering or master’s-level qualification in information systems security.
• Have 15 years of experience, including 5 years in a similar role.
• Use technical and operational English in an international environment.
• Be able to lead and unite a team and community.
• Communicate effectively; be rigorous, structured and able to explain cybersecurity topics and secure stakeholder buy-in.
• Be motivated to optimize and/or create processes and implement associated change management.
• Have project-management capability.
• Be proactive and make recommendations across the role’s responsibilities.
• Work autonomously and report on activities.
• Have an interest in international work.
• Have a good knowledge of common security standards and frameworks, including NIS2, ISO 27000 standards, NIST, CIS Benchmark, risk-analysis methods, ANSSI guidelines and GDPR.
• Be skilled in implementing business continuity and disaster recovery plans (PCA/PRA), including implementation of ISO 22301.
• Be proficient with tools for producing KPIs.
• CISSP or CISM certification is an advantage.

Skills

Experience

15 years of experience, including 5 years in a similar role.

Education

Five-year higher-education degree, with an engineering or master’s-level qualification in information systems security.

About Cerulean

Cerulean is the definitive career portal for the global luxury industry. We match exceptional professionals with exclusive opportunities at the world's most prestigious brands. From haute couture and fine watchmaking to prestige beauty, hospitality, and boutique retail, Cerulean centralises luxury employment to help you find the career for which you were destined.