Group Governance Risk & Compliance Grc Lead W - M H/F Lesaffre

Contexte :

As part of the creation of a new position, Lesaffre is looking for its future GRC Lead (Governance, Risk, and Compliance Lead).

Reporting to the Group CISO, in close collaboration with the Group and the local teams (IT and industrial), You will be responsible for ensuring compliance with IT/OT security rules.

Your essential missions will be:

• In a heterogeneous IT/OT environment, to audit (internally or with the help of partners) the compliance of the existing IS systems with our internal cybersecurity repository, then to follow-up and control improvement plans.
• Answer to the regulatory audits (SWIFT, GMP, Financial auditors, etc.) and to special audits requested by our partners.
• Coordinate the compliance activities related to local regulations (NIS2).
• Assist the IT/OT teams in their new projects, to be compliant by design with our security rules.
• Participate in the improvement and update of our security repository (policies, rules, guidelines, response plans, etc.), and more globally to build/animate the ISMS.
• Organize cyber-crisis simulations, with our business teams and the CISO.
• Lead the cyber risk analysis process (NIST based), in collaboration with the risk management team and the CISO.
• Address the data privacy questions, in collaboration with the Legal Department.
• Participate in the development of the IT/OT security budget, its implementation and monitoring.
• Participate actively to organize awareness campaigns.
• Help the Group and local teams in the evaluation of IT/OT solutions and related partners.
• Help to design and calculate IT/OT security KPIs.
• Work closely with the IT and OT Security Managers to define a homogeneous security approach.