JOB PURPOSE

Based in Shanghai, you will be a key member of the Global Cyber Security team within the Digital organization. Your primary responsibility is to serve as the security governance leader for local cloud environments, specifically Tencent Cloud and Azure China, as well as for internal infrastructure components. You will work closely with the global cybersecurity team to ensure that local cybersecurity decisions align with global standards.

In a dynamic and evolving environment with critical business demands and emerging technological challenges, you will contribute to the security design of end-to-end cloud architectures and services. Your role will also focus on achieving and maintaining cybersecurity compliance, while driving the integration of cybersecurity best practices from the earliest stages of project development.

• Focus on Tencent Cloud and Azure China services: Collaborate with infrastructure cloud architects to make strategic security configuration decisions, ensuring high security standards.
• Infrastructure cloud project reviews: Guide and challenge cyber compliance, implement new cyber solutions, and follow up on remediation efforts.
• Cloud Cyber Security governance:
  • Ensure continuous improvement of Sanofi's Cyber Security posture in the Cloud.
  • Manage implementation, configuration, administration, and changes, and provide comprehensive KPIs and dashboards.
  • Setup a continuous improvement methodology to drive security posture towards better protection
• Support in cyber security incidents resolutions and implementation of corrective measures.
• Cyber Security policies and referential: Ensure policies are properly applied and perform regular review to ensure the rules remain relevant.
• Expertise in key cloud technologies: Proficiency in Ansible and CyberArk is a plus.

• Minimum of 5 years of practice in cloud security / security architecture role, with specific focus on the digital environment in China.
• Result driven and delivery focused with an inspirational influence to the stakeholders
• Excellent analytical and problem-solving skills.
• Excellent written and oral communication with the ability to communicate complex technical concepts to non-technical stakeholders.
• Strong project management skills with the ability to manage multiple projects and priorities simultaneously.
• Relevant certifications such as CISSP, or equivalent are a plus.

• Fluency / clear communication in written and spoken English