Votre rôle

Within the Security department, the Governance Policies and Controls animates and monitors OB Security, relying on a community of actors in charge of the Security of their own entity or domain. GPC defines the Orange Business sectorial security policies (global security management, physical security, security incidents, vulnerability, security audit management, Information Security Management System) in line with Orange Group security policies, and manages the Orange Business Security Referential. It ensures that Orange Business entities implement the Orange or OB sectorial policies, defining their own entity policies on these bases if necessary, and organizes controls via audits or pentests.
GPC department manages main processes or activities such as security certification management, Vulnerability management; security Crisis management, Suppliers security management, Products Security, including Risks management.

Votre profil

The job encompasses two specific roles : Global Physical Security Officer and Local Chief Security Officer for the major service centre (MS)C Morocco.
As global physical security officer (PSO), your mission is to help define the Orange Business physical security policy with the internal stakeholders and ensures its implementation through the physical security governance and network of actors. You identify main physical security risks and define and follow with internal stakeholders the appropriate remediation plan to mitigate those risks. You also monitor and report on the compliance against physical security policies.
You chair the Physical Site Security Steer Co, and manage the interlock with Orange Group Security (DSEC) for Physical Security aspects and coordinate with PSO from other affiliates and stakeholders around Physical Security aspects. You consolidate the budget and strategy, and report to Orange Business top-management around physical security topics.
You provide the physical security requirements and control their application by the different entities in charge of providing hosting for orange business employees (general services), or for IT and network equipment hosting.
As local Chief Security Officer (LCSO) of MSC Morocco, you are the local representative of Orange Business Security in charge of deploying global security action plans locally in MSC Morocco (awareness, physical security, local security incidents..). You support the head of MSC in the development, implementation, maintenance of a local Information Security Management system (ISMS). You promote Security, compliance and Data protection culture within the MSC. You maintain the local security dashboard to control effectiveness and efficiency of the ISMS, and ensure proper follow-up of local security action plans.
As local representative of Orange Business Security in MSC Morocco, you support local teams either directly with your expertise, and by connecting with other security experts from the security community.
You will directly report to the head of Governance Policy Controls department within CTIO security direction.
As local Chief Security Officer (LCSO), you will also functionally report to the Head of MSC Morocco

Le plus de l'offre

Master (or equivalent) including specialization in Cybersecurity or several years of professional experience on Cybersecurity.
Core Competencies

• Physical Security : experience in managing physical security of one/several sites
• Cyber defense: knowledge of attack and intrusion techniques and environmental vulnerabilities
• Knowledge of governance, norms and standards: mastering audit methodologies
• Legal knowledge of laws relating to information and physical security
• Cybersecurity technology watch and study of trends
• Being ISO27001 and ISO22301 certified are a plus

Language Skills
Fluent in both French and English
Behavioral Skills

• Synthesis capacity
• Ability to lead a transversal programme in a multi-cultural environment
• Ability to manage complexity
• Writing of reports adapted to different levels of interlocutors
• Ethical sense
• Ability to work in a team

Entité

Chief Technology Info Office

Contrat