Kering

www.kering.com

2 Jobs

40,545 Employees

About the Company

Kering is a global, family-led luxury group, home to people whose passion and expertise nurture creative Houses across ready-to-wear and couture, leather goods, jewelry, eyewear and beauty: Gucci, Saint Laurent, Bottega Veneta, Balenciaga, McQueen, Brioni, Boucheron, Pomellato, Dodo, Qeelin, Ginori 1735, as well as Kering Eyewear and Kering Beaute. Inspired by their creative heritage, Kering's Houses design and craft exceptional products and experiences that reflect the Group's commitment to excellence, sustainability and culture. This vision is expressed in our signature: Creativity is our Legacy.

Listed Jobs

Company Name: Kering
Job Title: KERING - Cybersecurity Risk and Compliance Officer
Job Description: **Job Title:** Cybersecurity Risk and Compliance Officer **Role Summary:** Develop and implement IT security controls to ensure compliance with global standards and mitigate cybersecurity risks across Kering’s operations. Collaborate with IT, engineering, and third-party stakeholders to enforce security frameworks and drive continuous improvement. **Expectations:** - Master’s degree in Information Systems with security certifications (CISSP, ISO 2700X, CISM, etc.). - Minimum 5 years in information security, including 3+ years in technical testing, compliance, or security engineering. - Proven expertise in cloud security (AWS, GCP) and secure software development lifecycle practices. **Key Responsibilities:** 1. Build and maintain an IT security control framework aligned with standards (CIS, ISO27001, PCI DSS). 2. Identify and remediate control gaps with technology and business teams. 3. Manage risk register, track remediation, and reduce operational risk exposure. 4. Coordinate internal/external audits, control testing, and third-party security assessments. 5. Streamline processes for tracking, reporting, and resolving security issues. 6. Support cybersecurity certification programs and compliance with industry standards. 7. Lead consultants or vendors to execute security initiatives. **Required Skills:** - Technical control frameworks (NIST, CIS) and attack mitigation strategies (MITRE ATT&CK). - Cloud security expertise (secure configuration, CSA). - Security policy writing and program management. - Strong analytical, communication, and organizational abilities. - Fluency in English. **Required Education & Certifications:** - Master’s in Information Systems or related field. - Security certifications: CISSP, ISO 2700X, C-RISC, CISM, C-CISO, OCSP, GIAC, or SANS equivalent.

Company Name: Kering
Job Title: KERING Cyber Threat Intelligence Intern
Job Description: **Job Title** KERING Cyber Threat Intelligence Intern **Role Summary** Assist the CERT team in “Detect & React” by performing strategic Cyber Threat Intelligence (CTI) activities. Gather and analyze open‑source, closed‑source, and community-driven information to identify threats affecting the luxury sector. Deliver concise intelligence products, monitor cybercriminal and hacktivist activity, and support threat ecosystem mapping and scenario development. **Expectations** - Complete CTI research, analysis, and reporting within assigned timelines. - Translate technical data into actionable insights for security, safety, and brand protection teams. - Maintain up‑to‑date knowledge of cyber threats, dark‑web signals, and geopolitical trends relevant to luxury. - Collaborate effectively with CERT, SOC, and business units. **Key Responsibilities** - Conduct research using OSINT, closed sources, and community feeds. - Identify, assess, and track relevant threats, including fraud, counterfeiting, and preparatory attacks. - Produce concise notes, briefings, and intelligence bulletins for internal stakeholders. - Monitor dark‑web marketplaces and other relevant platforms for early warning signals. - Develop threat scenario briefs and future‑looking intelligence reports. - Map threat actor ecosystems specific to the luxury industry. - Ensure intelligence products are actionable and tailored to audience needs. **Required Skills** - Strong analytical and synthesis capabilities; ability to distill complex information into clear insights. - Excellent written communication in English; proficiency in crafting notes, briefs, and summaries. - Basic technical knowledge of networks, operating systems, malware, and email for understanding attacker methods. - Familiarity with OSINT tools and techniques. - Curiosity, rigor, and investigative mindset. - Ability to adapt messaging for varied audiences (technical, executive, non‑technical). **Required Education & Certifications** - Current student or recent graduate in fields such as International Security, Intelligence, Geopolitics, Criminal Justice, or related disciplines (Sciences Po, LSE, equivalent). - Minimum of bachelor’s degree (or coursework equivalent). - Knowledge of cyber security fundamentals preferred; certifications such as CompTIA Security+, CEH, or relevant OSINT courses are plus.