Job description

About the context

At GISEC, our mission is to protect the CHANEL from cyber threats by safeguarding our people, preserving the integrity of our data, and ensuring the resilience of our systems. We lead a federated, risk-based cybersecurity strategy embedded across all regions and divisions, tailored to the unique realities of each business area. Through governance, transformation, and collaboration, we drive cybersecurity maturity and readiness to support CHANEL’s ability to operate securely and confidently in a digital world.

Your role @ CHANEL

You will lead the Computer Emergency Response Team (CERT) in monitoring, detecting, analysing, and responding to cybersecurity incidents. This role requires deep technical expertise, strong leadership abilities, and a proactive approach to protecting organizational assets from evolving cyber threats. Your main responsibilities will be :

• Contribute to the creation and optimization of new CERT services/infrastructure
  • Define and drive the CERT roadmap (detection, hunting, tooling, …) according to cyber risk priorities
  • Adjust CERT priorities according to evolving threats
  • Contribute to defining detection and response architecture for a global information system
  • Actively participate in the selection of cybersecurity tools

• Manage day-to-day activities of the CERT team, ensuring efficient incident response and threat mitigation.
  • Represent Chanel for CERT activities
  • Develop CTI (operational, tactical, technical, and strategic) production. Integrate CTI into detection, investigation, and threat hunting workflows
  • Oversee the operational management of the CERT (leading CERT analyst expert) providing support for all SOC services across all Regions, Divisions, Global, and Corporate entities
  • Maintain a high level of operational excellence (SLA,..)

• Oversee the identification, analysis, containment, eradication, and recovery from security incidents.
  • Monitor threat intelligence feeds and proactively identify emerging threats relevant to the organization.
  • Ensure the relevance and performance of the detection pipeline (SIEM, EDR, and other specific sources)
  • Prepare and deliver incident reports, metrics, and post-incident lessons learned to management and stakeholders.
  • Guarantee the quality, consistency, and speed of alert analysis and investigations

• Coordinate security incidents and investigations with IT, legal, compliance, and business units
  • Lead the operational aspects of complex investigations in collaboration with Regions, Divisions, and Global/Corporate teams (RISOs, DISOs, IT/business managers, worldwide infrastructure teams)
  • Collaborate closely with crisis management and communication teams (OpRes)
  • Provide clear, precise, and actionable technical guidance
  • Ensure compliance with relevant legal, regulatory, and policy requirements.
  • Ensure the production of comprehensive analyses, timelines, IOCs, and corrective recommendations

• Develop, maintain, and continuously improve incident response plans, playbooks, and Standard Operating Procedures (SOPs).
  • Drive ongoing improvements in detection, including onboarding new log sources (cloud, on-premises, OT, SaaS)
  • Supervise the design and implementation of new use cases
  • Mentor CERT analysts and provide ongoing training to improve the team’s technical and procedural capabilities.
  • Oversee deployment, configuration, and optimization of security tools (SIEM, IDS/IPS, EDR, etc.).
  • Communicate regularly to Cyber, IT teams, management, and end users about threat developments
  • Provide concrete input to help prioritize prevention, detection, and awareness actions

The impact you can create at CHANEL

• Detection & Monitoring : Deliver a clear, actionable vision to advance CERT capabilities
• Investigation & Incident Response : Make critical technical decisions during major incidents/crisis
• Operational & Tactical CTI : Adjust CERT priorities according to evolving threats
• Roadmap & Strategy : Prioritize developments according to real-world threats

You are energized by       

• A fast-moving environment and incident management
• Leading initiatives across multi-regions and multi-partners
• Working in a worldwide and multicultural environment with multiple partners, at different organizational levels.
• The technology and the new way of working and sharing.
• Taking the lead, collaborate & coordinate.         
   

What you will bring

• Excellent verbal and written communication skills, adaptable to various senior audiences
• Broad technical knowledge with a strong understanding of information security trends, best practices, and standards
• Proven project management and process deployment experience
• Ability to deliver high-quality materials (presentations, documentation, projects, processes)
• Experience working in an international environment
• Customer-oriented, with strong prioritization and problem-solving abilities
• Quick learner with a positive attitude, professionalism, and excellent analytical skills
• Strong collaboration and team spirit, with excellent interpersonal skills
• Passionate, open-minded, and highly motivated

Requirements

• Significant experience in information security, with experiences in an incident response or CERT/SOC lead role in an international environment
• Significative experience in security operations, incident response, malware analysis, and forensics
• (CERT, SOC, DFIR,…)
• Strong technical expertise and hands-on experience: Windows, AD, Linux, EDR, SIEM, logs, DFIR, networks, malware, IDS/IPS, and other security monitoring tools …
• Experience managing major incidents/crisis and working under pressure
• Understanding of network protocols, operating systems (Windows, Linux), and cloud platforms
• Ability to take a step back, structure, prioritize, and make decisions
• Proven track record in driving a roadmap and strategy
• Natural leadership and team management skills, decisiveness elevate technical standards
• Excellent communication skills (towards CISO, crisis management teams, IT, business management)
• Ability to work under pressure and in crisis situations
• Fluency in English and French

• Certifications (preferred): CISSP, CISM, GCIH, GCIA, or other relevant security certifications

Leveraging your unique experiences, CHANEL will enable you to

• Be a key partner for Business and IT Corporate domains, Divisions and Regional Data & Analytics teams, as well as various internal partners within Global, Corporate Services, and Regions
• Collaborate with internal partners at Corporate, Divisional, and Regional levels

At CHANEL, we are committed to fostering an inclusive culture that nurtures personal growth and contributes to collective progress. We believe the uniqueness of each individual enhances the diversity, complementarity, and effectiveness of our teams. We strongly encourage your application, as we value the perspective, experience, and potential you bring to CHANEL.