Information security officer - DevSecOps program security officer

votre rôle

You will join a team of security officers (delegated CISOs) in charge of coordinating and implementing security in all operational processes concerning Orange Business customer operations.

In this role, you will be in charge of :

• ensuring that the risks associated with information systems and networks are identified and managed through the risk analyses and audits you will carry out on the various information systems and internal applications used by the teams ;
• contributing to keep the organization's information systems security policy up to date ;
• leading identified remediation and compliance actions as part of security incident management ;
• contributing to the definition and implementation of the awareness program;
• monitor indicators associated with information systems and network security;
• to lead the network of security referents present in each operational department, through the existing organization.

In particular, your mission will focus on security management in automation & DevOps programs and thus :

• Drive the development and champion the integration of a robust DevSecOps program within GDO teams, leveraging insights from previous audits and fostering a culture of collaboration.
• Actively develop and advocate for a comprehensive learning pathway, utilizing platforms like Orange Learning and newsletters, to enhance GDO skills and performance.
• Maintain a good understanding of GDO teams requirements through your ability to collaborate with the automation program leaders ;
• Ensure the identification and management of risks in DevOps information systems and networks through comprehensive risk analysis (EBIOS RM) and meticulous audit findings.