Information Security Risk Leader

Hungry for challenges? Join a group with innovation at its heart and contribute to the automotive revolution!

OPmobility is a world-leading provider of innovative solutions for a unique, safer and more sustainable mobility experience. Innovation-driven since its creation, the Group develops and produces intelligent exterior systems, customized complex modules, lighting systems, clean energy systems and electrification solutions for all mobility companies. With a €11.4 billion economic revenue in 2023, a global network of 152 plants and 40 R&D centers, OPmobility relies on its 40,300 employees to meet the challenges of transforming mobility.

Our ambition? Provide automakers with cutting-edge equipment and solutions to develop tomorrow’s clean and connected car.

As Information Security Risk Leader, you will be the point of contact for all risk analysis activities in projects, assessing the cyber maturity level of our partners and managing the associated security assurance plans.

You will be responsible for the following tasks and responsibilities:

Risk analysis:

• Oversee risk analysis missions when they are carried out by an external partner
• Carry out risk analyses in projects (ISP) using our tool, for which you will be the “tool & process owner”
• Propose and implement the necessary enhancements to the existing tool (Excel spreadsheet)
• Support Business Groups in adopting the tools and assist/train them in carrying out risk analyses in projects
• Participate in maintaining the Group Cyber Risk Matrix risk mapping

Security Assurance Plan:

• As the “owner,” oversee the “Security Assurance Plan” phases in projects and calls for tenders;
• Propose and implement identified improvements to the various existing PAS documents;
• Third-party risk management:
• As part of the TPSM (Third-Party Security Management) process, oversee the validation phase for responses to Security Evaluation questionnaires provided by our partners
• Propose and implement necessary improvements to the TPSM questionnaire

Other:

• Contribute to drafting security policies in line with current requirements and the ISMS
• Contribute to certain projects in the cyber roadmap approved for the Strat plan

For these all the activities, you will work with:

• External

• IT and cybersecurity solution publishers and integrators

• Internal

• Members of the Cybersecurity team
• Project managers and IS and IT experts from Opmobility Group
• Members of the Digital & IS Department from all Business Groups
• Business stakeholders from OPmobility Business Groups

Required profile:

OPmobility is looking for someone who can perform all the above tasks.

• You have a higher education degree (5 years of higher education) in IT, IT risk management, auditing, or equivalent.
• You have significant experience in IT risk management for on-premises and cloud environments
• You have proven experience in assessing the cyber maturity level of third parties (TPSM/TPRM)
• You are proficient in ISO 27005, ISO 27001, EBIOS RM (or equivalent) standards and risk mapping tools
• You are known for your rigor, analytical skills, listening skills, and communication skills
• You are comfortable speaking and writing in English.

As a responsible company, OPmobility pays particular attention to diversity and equality within its teams and the Group commits to treat all job applications equally.