Cybersecurity Lead

**Coders Connect** are partnering
**with Sanofi.**

**About Sanofi CHC**

At Sanofi Consumer Healthcare, we have one shared mission - we work passionately, every day, to ‘serve healthier, fuller lives’ now and for the generations to come.

In order to do so, we strive to act as a force for good by integrating sustainability along our business and employees’ mission and operate responsibly from both a social and environmental point of view.

Everything we do is centered around people’s interests - our consumers, our customers, healthcare professionals, and our employees - across the world.

We are building loved brands that serve 1bn consumers worldwide, through our key platforms: Allergy, Physical & Mental Wellness, Pain, Digestive Wellness and Cough, Cold & Flu.

We aspire to become the best Fast Moving Consumer Health (FMCH) company In & For the world and we aim to build a work environment where people can thrive, grow, enjoy and be at their best.
**The Team**
- Our team is engaged in designing and delivering Digital Tech Services for all CHC worldwide.

We deliver our solutions in a highly competitive market answering FMCH needs and sometimes supporting highly regulated environments (GxP, SoX and other regional and local regulations).

Our team operates in an international context, serving all markets in most of the countries around the world.

To reach our goals we have organized our model around 6 main pillars
- Enterprise architecture
- Infrastructure
- Cyber Security
- Operations
- Integration
- Strategy & operations

Mission within the Digital autonomy Program

The CHC CISO will initially steer the cybersecurity stream of the Digital autonomy program.

She/He will be responsible to ensure the proper and reasonable mínimal cybersecurity operational maturity ensuring the protection of CHC as of the Day 1 of the Terminal Service Agreement.
- In this context she/he will rely on the methodology (runbook) and the experience feedback built and gained by Sanofi Cybersecurity with the previous similar operations
- She/He will be part the Digital autonomy Program team and partner with all the Global Cyber team and the Digital stakeholders to define the Cyber strategy and tactic to build a cost efficiency and reliable cybersecurity capability.
- She/He will report to the Global Cybersecurity Officer of Sanofi

When the hard decoupling becomes effective, the CHC CISO takes the effective responsibility of the cyber protection of the CHC company as CHC CISO.

Main responsibilities of CHC CISO

As of the Day 1 of the TSA (Terminal Service Agreement), the role owner becomes the CHC CISO (reporting line not yet defined even if most likely to the Head of Digital for CHC).

The CISO is fully and entirely accountable for protecting the CHC activity against any internal and external cyber threat endangering the company’s operations or reputation. He/She will:

- Define, develop, and lead the Cyber Security strategy implementation in alignment with Business strategy and Cyber threats
- Ensure proper compliance with Cyber Security and data protection European regulations (GDPR, LPM in France, Kritis in Germany, CSL in China)
- Develop reports to regularly communicate the effectiveness of the cybersecurity implementation to the CHC Senior Leadership
- Ensure the operational implementation of security processes (risk management, security in projects, security patch management, vulnerabilities detection and remediation, vendor management, etc.) for the Business, Industrial and R&D operations
- Implement consistent Cyber detection and response capabilities that must be delivered by the Cyber Security Operation Center. Ensure an operational and tested crisis management process in case of Cyber-attack in relation with key stakeholders (Business, operational, legal, communication, etc.)
- Partner with all internal and external stakeholders (Business, Digital, Quality, Industrial, Regulators, etc.) and actively monitor security technology opportunities to create innovative and best-in-class security architectures and services
- Regularly educate and empower Leadership Teams, Business stakeholders, operational teams on Cyber

Technical background required 7+ years of experience in information security and cyber security. A professional Cyber Security certification is appreciated Good understanding of Information technologies, architecture, and main recognized Cyber frameworks - NIST, ISO 2700x, etc. A familiarity with the new digital technologies and associated cyber practices for Cloud, Infra-by-code, IaaS/SaaS/PaaS services, OT/IoT, factory 4.0, DevSecOps, etc. Experience on a highly regulated sector Knowledge on industrial systems and architectures Soft skills required Proven experience leading and developing a high-performing global Information Security team Proven successes working with executive team members Ability to provide innovative leadership and thinking to global and cross-functional teams Excellent verbal