Security Engineer
CDI - IT&DATA - Global Privileged Access Manager - (H/F)
Rueil-Malmaison
Откликнуться на сайте работодателяОписание вакансии
About The Job
For over 100 years, we’ve been by your side, all across France!
At Danone, we believe growth is something to be savored. That’s why our 26 brands are part of the everyday lives of French consumers, offering delicious products that bring enjoyment while taking care of oneself and loved ones. With more than 8,000 Danoners across 13 production sites, 7 warehouses, 3 headquarters and an R&D center, Danone continuously works on developing and enhancing iconic products found in your kitchens, supermarkets, restaurants, cafés, as well as in healthcare facilities and pharmacies. Certified B Corp and Happy Trainees, Danone does not aim to be the best company in the world, but a better company for the world. We strive to offer the very best to both our consumers and our people.
Danone is looking for a
Global Privileged Access Manager
on a
permanent contract
(CDI), based in
Rueil-Malmaison
(92), France.
The Global Privileged Access Manager is accountable for the strategy, implementation, operation, and continuous improvement of Privileged Access Management across Danone. The role serves as the global owner of all privileged access services, ensuring that administrative access to critical business systems, infrastructure, cloud platforms, applications, and operational technologies is managed according to the highest security standards.
The position is responsible for deploying and expanding privileged access controls across all Danone domains and environments while ensuring long-term sustainability, operational excellence, regulatory compliance, and cyber resilience. The role also provides governance and oversight for Tier-0 security operations and supports the protection of Danone's most critical identity and infrastructure assets.
Key Accountabilities
Global PAM Service Ownership
- Own the end-to-end Privileged Access Management service globally.
- Define the vision, strategy, operating model, and multi-year roadmap for privileged access.
- Ensure services remain aligned with business priorities, cybersecurity strategy, and regulatory requirements.
- Establish measurable service KPIs, operational standards, and governance processes.
- Drive service adoption and maturity across all business units and regions.
Enterprise-Wide PAM Deployment
- Lead the implementation and rollout of privileged access controls across all Danone domains, platforms, and technologies.
- Expand coverage of privileged account governance to infrastructure, cloud, applications, OT environments, third parties, and service accounts.
- Ensure new systems and projects adopt privileged access standards by design.
- Standardize privileged access processes globally while accommodating local business requirements.
- Tier-0 Security & Critical Identity Services
- Provide governance and oversight for Tier-0 administration and security controls.
- Support the sustainability and continuous improvement of Tier-0 protection services.
- Ensure privileged access to Active Directory, Entra ID, identity platforms, PKI, and other critical infrastructure follow approved security controls.
- Partner with AD, Infrastructure, and Security teams to maintain the highest level of protection for Danone's identity "crown jewels."
Security Control Sustainability
- Ensure privileged access controls remain effective, auditable, and sustainable over time.
- Define operational processes that maintain security standards beyond initial deployments.
- Drive continuous control validation, remediation, and improvement activities.
- Establish lifecycle management for privileged accounts, service accounts, emergency accounts, and administrative identities.
Risk, Compliance & Governance
- Lead privileged access reviews, certifications, and risk assessments.
- Report PAM maturity, control effectiveness, and risk exposure to senior leadership.
- Act as the escalation point for privileged access-related risks and control gaps.
- Business Enablement & Stakeholder Management
- Enable secure administrative access without impacting business operations.
- Partner with Infrastructure, Cloud, OT Security, Application teams, and external suppliers.
- Manage relationships with PAM technology vendors and service providers.
Our employer commitments
- The guarantee of a relevant, competitive and scalable compensation package, through external benchmark and internal equity. It consists among other things of a fixed salary, an yearly bonus, gain sharing.
- Flexibility of work and workplaces, such as weekly homeworking.
- Skills development for all, thanks to our Danone Academy France and through a year-round managerial conversation cycle.
- The possibility to use up to 3 days a year of volunteering through the platform Vendredi.
- Parenting policy benefits, such as extended Parental Leave (14 additional maternity/paternity days covered), or the ability to convert some earnings into time off
- Other benefits include a complementary pension scheme, health care plan, CSE, 100% of the Navigo pass covered
About you
The criteria below remain indicative. A candidate who has a different combination of experience and skills could also be considered.
- 8+ years of experience in IAM, Cybersecurity, Infrastructure Security, or Security Service Management.
- Proven track record leading enterprise-scale PAM programs and securing critical identity and Tier-0 environments.
- Strong expertise in governance, risk management, compliance, and service ownership.
- Experience working with global stakeholders, cross-functional teams, and external service providers.
- Demonstrated ability to drive strategic initiatives, change management, and continuous improvement.
We are proud to promote diversity and equal opportunity within our teams. We believe that our differences will make a difference, and that an inclusive work environment will drive our growth as a company, as a team, and as individuals. We will therefore consider all applications* by fostering an inclusive work culture where everyone can feel at home.
We have also chosen to remove inclusive writing from our job offers because its complexity penalizes people with cognitive disabilities, including dyslexia, dysphasia, or apraxia.
- All nominations will be considered regardless of origin, background, religion, sex, sexual orientation, gender identity, disability…
About Us
One Planet, One Health - BY YOU !
Our four core values "HOPE" HUMANISM, OPENNESS, CLOSENESS and ENTHUSIASM serve as our compass.
Every day, you will make decisions that impact our economic and societal performance, as well as our ability to achieve our ambitions.
At Danone, you can just be yourself. We are convinced that it is up to YOU to define how you work, develop and progress.
With us, you will work in a challenging, authentic, and caring environment.
Want to know more about the daily life of our danoners? Check out our LinkedIn page and our @DanoneTalentFrance Instagram account.
You want to take action to bring health through food to as many people as possible? Join us!
#ind_classique
(for external – to be in white so it doesn’t show in the ad)
Это сохранённая копия объявления, опубликованного в другом месте. Вакансии снимают без предупреждения — перед откликом проверьте сайт работодателя. mentors.coach не является нанимающей стороной.