Job at a glance
Date de publication : Sep 11, 2026, 12:00AM Orange Business is here! About us Join us at Orange Business! We are a network and digital integrator that understands the entire value chain of the digital world, freeing our customers to focus on the strategic initiatives that shape their business. Every day, you will collaborate with a team dedicated to providing consistent, sustainable global solutions, no matter where our customers operate.
With over 30,000 employees across Asia, the Americas, Africa, and Europe, we offer a dynamic environment to develop and perfect your skills in a field filled with exciting challenges and opportunities. About the role Security is a strategic priority for Orange Business. Protecting our information assets, digital services and technology landscape is essential to maintaining customer trust, safeguarding the business and ensuring compliance with regulatory and internal security requirements.
The Global Policy Controls team is responsible for defining, coordinating and monitoring key cybersecurity governance processes across Orange Business. The team works closely with security stakeholders across the organisation to strengthen its security posture, enhance vulnerability management and drive continuous risk reduction. As a Security Analyst and Auditor, you will conduct technical security assessments and audits, manage vulnerability and security posture activities, and support the continuous improvement of the organisation's cybersecurity controls.
Working closely with infrastructure, application and security teams, you will identify and assess technical security risks, coordinate remediation activities, monitor external security exposure, and provide reporting that supports informed risk management and compliance with organisational security standards. About you Key Responsibilities Technical Security Assessments and Audits Plan, coordinate and perform technical security assessments across infrastructure, applications, cloud environments and internet-facing services.
Conduct technical security audits, including configuration reviews, vulnerability assessments, architecture reviews and secure configuration validation. Coordinate penetration testing, application security assessments and code reviews with internal teams and external providers where appropriate. Validate assessment findings to eliminate false positives and ensure the accuracy of reported vulnerabilities.
Produce clear technical assessment reports detailing findings, risk levels and remediation recommendations. Present findings to technical and business stakeholders and support the implementation of remediation plans. Track remediation activities to ensure audit findings are resolved within agreed timelines. Contribute to the continuous improvement of technical assessment methodologies and security standards.
Vulnerability Management Assess newly disclosed vulnerabilities and determine their impact on the Orange Business’s technology landscape. Coordinate remediation activities with infrastructure, application and security teams to ensure vulnerabilities are addressed within agreed service levels. Validate vulnerabilities, assess exploitability and support risk-based prioritisation. Monitor remediation progress and escalate critical or overdue vulnerabilities where necessary.
Produce vulnerability dashboards, compliance metrics and management reports. Maintain vulnerability management procedures, documentation and operational standards. Identify opportunities to improve vulnerability management processes through automation and continuous improvement initiatives. External Attack Surface Management Maintain an accurate inventory of internet-facing assets, domains, subdomains and public IP addresses.
Identify newly exposed assets and ensure they are incorporated into the organisation's security monitoring processes. Perform regular external vulnerability assessments using approved security tools. Validate discovered vulnerabilities and