Security Lead
About this position
As a Security Lead, you will play a pivotal role in ensuring the safety and integrity of Le Creuset’s digital assets. Your expertise will guide the local technology teams, and you'll be responsible for implementing and sustaining robust security measures, coordinating incident responses, and driving regional and global security initiatives. You're a seasoned professional with a passion for cybersecurity leadership, and you will be at the heart of protecting the Le Creuset brand across the globe.
Responsibilities
The Security Lead will be responsible for:
• Architect Security Infrastructure:
o Develop technical architecture documentation and roadmaps for incorporating mandated security services.
o Ensure the seamless integration of security tools across regional infrastructure.
• Process Development and Implementation:
o Create and maintain local processes for the Security Operations Centre (SOC), including use cases, indicators of compromise, and run books.
o Define local security requirements for new security initiatives.
• Monitoring and Compliance:
o Monitor security procedures, ensuring compliance with personnel, physical, and administrative security practices.
o Establish regional security controls for various environments.
o Identification and remediation of vulnerabilities in a timely manner.
• Security Controls and SOPs:
o Collaborate with the regional technology teams to define security Standard Operating Procedures (SOPs).
o Embed security controls into existing practices to enhance effectiveness.
o Report on control metrics to Group Information Security for global governance, oversight and risk management.
• Threat Intelligence and Assessments:
o Stay current with the latest threats and adversary tactics.
o Partner with the global threat intelligence teams to drive impactful security assessments.
• Leadership and Communication:
o Exhibit strong critical thinking, decision-making, and problem-solving skills.
o Communicate effectively with technical and non-technical teams, including regional leadership.
o Liaise with security stakeholders globally as part of our security community.
o Participating in the successful development and delivery of timely, targeted and easily digested security training for colleagues, including simulation-based activities.
• Incident Response Support:
o Assist with incident response initiatives and post-mortems.
Requirements
Qualifications:
• A bachelor’s degree in computer science or equivalent experience.
• At least 5 years of offensive/defensive security experience, including leadership roles.
• Technical leadership experience or security management roles.
• Proficiency in planning and executing penetration tests, purple team exercises, and complex adversarial operations.
• Strong communicator, who listens and can be considerate, concise, and clear with both verbal and written communication. Proficiency in English is a must.