Information Protection Operations Head

Le contenu du poste est libellé en anglais car il nécessite de nombreuses interactions avec nos filiales à l’international, l'anglais étant la langue de travail.

This job offer is accessible to all, regardless of gender.

Job title:Information Protection Operations Head

Location: Gentilly – France

Given the level of English required for this position, applications must be accompanied by an English version of the CV/resume.

About the job 

Information is one of the crown jewels assets but also one of the most vulnerable for Pharma world. The Information Protection head of operations plays an essential role to protect intellectual & industrial property, patients’ data and Group strategy. He stands at the crossroads between Security, Cybersecurity, Legal expertise, actionable Geopolitics, modus operandi and trends intelligence, and operational excellence. He participates in guaranteeing that Sanofi informational assets are safe from internal or external threats, aligned with the Company’s AI driven mission.

Managing operations, he supervises for this scope a team of experts in Data Loss Prevention (DLP), Insider Risk (if information relevant), Classification and labelling, Incident response, Governance and Conformity, AI and geopolitics, information and reputation. The position requires a strategic view and discipline in execution to balance the mitigation and ensure outcomes are technically robust, but also legally strong to feed a Court case.

The position carries a truly global scope, requiring close collaboration with cross-functional stakeholders and Business Units worldwide. The incumbent will serve as a trusted advisor, translating complex threat landscapes into actionable protection strategies. Not only advisory but communication, acculturation, and training are core dimensions of this role, as building or strengthening a culture of information protection across a diverse, multinational workforce is as critical as the technical controls deployed.

Main responsibilities

Reporting to Head of Security Business Intelligence Center, Information Protection and Insider Risk, the position is naturally focusing on Information, but also transversely a full supportive component of the integrated unit.

Operational leadership

• Lead, mentor, and develop a high-performing team, fostering a culture of excellence, accountability, and continuous learning.

• Allocate resources across operational priorities, balancing reactive incident response with proactive protection initiatives.

• Establish and maintain operational processes, workflows, and escalation procedures to ensure consistent and efficient program delivery.

• Drive cross-functional collaboration with stakeholders to embed information protection practices across the organization.

• Report regularly risk posture, emerging threats, and program’s maturity to the Head of Security Business Intelligence, Information Protection and Insider Risk.

Information Protection Operations

• Oversee the design, deployment, tuning, and continuous improvement of Data Loss Prevention (DLP) solutions.

• Lead the Insider Risk Management program (information protection component): detection, use cases, behavioral analytics, investigation workflows, and case management processes.

• Govern the Information Classification & Labeling framework, ensuring consistent application of sensitivity labels across repositories, collaboration platforms, and communication channels.

• Manage information security incidents lifecycle: detection, investigation, containment, remediation, and post-incident review.

• Ensure operational readiness through regular testing, tabletop exercises, and simulation drills for information protection scenarios.

• Monitor threat intelligence and translate geopolitical and sector-specific threat developments into operational protective measures.

• Act as a trusted advisor on risks, geopolitical threat intelligence, and security implications of AI.

• Design and deliver comprehensive awareness and training programs to build a strong culture of information protection across Sanofi's global workforce, adapting content for diverse audiences and cultural contexts.

• Develop and execute acculturation strategies to drive behavioral change.

Innovation & Continuous improvement

• Monitor and evaluate emerging technologies with particular focus on Artificial Intelligence assessing their geopolitical implications, legal frameworks, opportunities, risks, and threats for information protection.

• Apply AI prompting best practices to leverage generative AI tools responsibly and effectively within the Information Protection function, while developing guardrails against their misuse.

Information Protection Expertise (360° Information Intelligence)

A distinguishing feature of this role is the expectation of a holistic, 360° understanding of information. Not limited to securing internal data assets but encompassing the full lifecycle of information across three critical dimensions: what the organization produces and disseminates, what is said about the organization, and what information the organization receives. This comprehensive posture is essential in generative AI era, coordinated influence operations, and geopolitical information warfare.

About you

Language: Fluent in English, French appreciated, other language welcomed.

Education

University degree (master’s level or equivalent) in Law, preferred Criminal Law & Procedure, Intellectual Property Law, or a closely related legal discipline. Or relevant Law enforcement experience.

CISSP (Certified Information Systems Security Professional) certification OR equivalent recognized certification (CISM, CISA, CRISC…), OR relevant proven practice.  

Additional academic or experience background in Information Security, Computer Science, or Geopolitics is a strong asset.

Professional Experience

•Minimum 7 years of progressive relevant experience.

• Minimum 3 years in an operational leadership role managing teams and programs in an information protection, cybersecurity, geopolitical or security context.

• Demonstrated experience in highly regulated industry is strongly preferred (possibly pharmaceutical, healthcare, life sciences).

• Proven management of global or internationally distributed cases and teams across multiple time zones and cultural contexts.

•Experience working at the intersection of security operations, legal/compliance functions, and business including formal investigations.

Technical Expertise: Deep expertise in Data Loss Prevention

Insider Risk : Proven experience designing and operating Insider Risk Management programs, including geopolitical root causes, behavioral analytics and case management related to information protection.

Classification & Labeling: Strong knowledge of information classification frameworks and labeling technologies.

Incident Response: Experience managing security incident response, including digital forensics and evidence management. GRC : Familiarity with Governance, Risk, and Compliance frameworks.

Demonstrated knowledge of Artificial Intelligence across four dimensions: geopolitical implications, applicable legal frameworks, opportunities for security operations, and risks & threats.

Proficiency in AI prompting techniques and best practices, including prompt engineering, chain-of-thought prompting, and responsible use of large language models in a professional security context. Understanding of generative AI security implications, including data leakage risks through AI tools, model poisoning, and adversarial AI. Agentic knowledge.

DESIRED ATTRIBUTES

·       Leadership & Management

·       Analytical & Problem-Solving

·       Interpersonal & Communication

·       Adaptability & Innovation

PursueProgress. Discover Extraordinary.

Progress doesn’t happen without people – people from different backgrounds, in different locations, doing different roles, all united by one thing: a desire to make miracles happen. You can be one of those people. Chasing change, embracing new ideas and exploring all the opportunities we have to offer. Let’s pursue progress. And let’s discover extraordinary together.

At Sanofi, we provide equal opportunities to all regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, or gender identity.

Watch our ALL IN video and check out our Diversity Equity and Inclusion actions at sanofi.com!