IT&Data Cybersecurity Partner - Data Cybersecurity

O Tobie

• 8+ years in cybersecurity / information cybersecurity

• Proven experience in:

• Cybersecurity governance and risk management

• Experience in large, international organizations

• Strong knowledge of:

• Data cybersecurity technologies (DLP, encryption, IAM...)Cloud cybersecurity (Azure, AWS, etc.)

• Data cybersecurity technologies (DLP, encryption, IAM...)

• Cloud cybersecurity (Azure, AWS, etc.)

• Understanding of:

• Regulatory frameworks (GDPR, NIS2, ISO 27001)

• Ability to translate technical risks into business impact

• Strong leadership and influencing skills

• Stakeholder management at senior level

• Analytical and problem-solving mindset

• Ability to operate in complex and fast-paced environments

• We expect you to have:

• Experience

• Skills

• Soft Skills

About Danone

• At the Danone group we are fulfilling our mission, according to which „we bring health to as many people as possible”.

• Behind our brands is always technology pushing them forward. We know that the future of business is IT and data. That’s why we use advanced and innovative IT solutions which are implemented in all Danone units around the world.

• For more information about Danone, our divisions and culture, please explore www.careers.danone.com.

• WE OFFER

• A revolutionary job that will be part of the digital transformation of global FMCG leader. We consider that it starts with people who notice more and make better decisions. And that’s exactly the kind of people we want to attract to DANONE.

• We know that the future of business is IT and data. We are looking for catalysts for change. We ensure you work with great products, and technologies in an international environment, learning from experts and experienced managers but how much you will develop in this position depends on you!

• We value smart working so that’s why while being focused on results, we offer flexible working hours and a home office policy. You are able to work from the office in Warsaw twice a week. Want to move to Warsaw? OK! We have a relocation package to help you out!

• On top of that, you will have access to the benefits we offer to you and your family, including private medical care, benefits package for parents, life insurance, social fund, or employee discounts.

• We’ve always been changers.

• WHAT NEXT?

• Click the “Apply” button and create your profile in the recruitment system by uploading a CV. We will get acquainted with your experience and then we will arrange the selected candidates for the first telephone interview. Next steps are two meetings with your future managers at Danone.

• Do not hesitate and join our IT&DATA Team in Poland which vision is that the technology is a strategic differentiator for DANONE, powered by an IT agile organization.

• We embrace diversity in our organization. This means giving full and fair consideration to all applicants without attention to race, color, religion, sex, age, sexual orientation, gender identity, national origin or disability status.----

• Danone Sp. z o.o. with its registered office in Warsaw (ul. Bobrowiecka 8, 00-728 Warsaw) is the controller of your personal data disclosed in the profile and in documents submitted during the recruitment process.

• Administratorem Twoich danych osobowych udostępnionych w profilu oraz w dokumentach składanych w ramach rekrutacji jest Danone Sp. z o.o. z siedzibą w Warszawie (ul. Bobrowiecka 8, 00-728 Warszawa).

O pracy

• Define and maintain the enterprise data cybersecurity strategy and roadmap

• Ensure alignment with business priorities, risk appetite, and regulatory requirements (GDPR, NIS2, etc.)

• Lead initiatives on:

• Data classification & handlingData Loss Prevention (DLP)Encryption & key managementData access governance (IAM integration)

• Data classification & handling

• Data Loss Prevention (DLP)

• Encryption & key management

• Data access governance (IAM integration)

• Identify and mitigate data-related risks, including:

• Insider threatsThird-party access risksData leakage scenarios

• Insider threats

• Third-party access risks

• Data leakage scenarios

• Establish and enforce data security policies, standards, and controls

• Ensure compliance with:

• Regulatory frameworks (GDPR, NIS2, etc.)Internal audit and cybersecurity standards

• Regulatory frameworks (GDPR, NIS2, etc.)

• Internal audit and cybersecurity standards

• Support audit readiness and remediation plans

• Define controls for data breach detection

• Support investigation of:

• Data leaksSuspicious data activity

• Data leaks

• Suspicious data activity

• Contribute to crisis management and regulatory reporting

• Work closely with:

• IT, Digital, AI, Legal, Compliance, and Risk teamsRegional cybersecurity teamsBusiness

• IT, Digital, AI, Legal, Compliance, and Risk teams

• Regional cybersecurity teams

• Business

• Manage external partners and cybersecurity vendors

• Improving control over third-party access and usage

• Addressing gaps identified through cybersecurity assessments and red team exercises

• Supporting fast-changing regulatory landscape

• You will focus on:

• Data Cybersecurity Strategy

• Governance & Compliance

• Cybersecurity Monitoring & Incident Response

• Collaboration & Leadership

• Key Challenges