Cybersecurity Compliance Officer

About the role

We are seeking a proactive and detail‑oriented Information Security professional to strengthen Sodexo’s security and compliance landscape. You will support the continuous improvement of our Information Security Management System (ISMS) and drive alignment with ISO 27001, NIS2, AI Act, PCI‑DSS and other relevant frameworks.

Key responsibilities

• Build and manage an annual consolidated Information Security Compliance Programme, providing visibility of audit and assurance activities.
• Deliver security compliance reporting to the CISO, IT, and senior business leadership.
• Coordinate NIS2 compliance activities across multiple regions and maintain risk management accreditation documents.
• Manage and maintain the ISMS in line with ISO 27001/27002, including policy definition, documentation, and regular audits.
• Conduct third‑party security assurance assessments and project risk evaluations.
• Collaborate with Legal to embed appropriate information security clauses in contracts.

Required profile

• Proactive, detail‑oriented information security professional.
• Experience with ISO 27001, ISO 27002, NIS2, PCI‑DSS and related regulatory frameworks.
• Strong knowledge of risk management methodologies (e.g., DART) and accreditation processes.
• Ability to work across business and IT teams and communicate findings to senior leadership.

Required skills

• ISO 27001
• ISO 27002
• NIS2
• PCI‑DSS
• Risk management
• Third‑party security assessments
• Information Security Management System (ISMS)

What we offer

• Opportunity to work in a global leader in quality‑of‑life services.
• Exposure to European regulatory compliance projects.
• Collaborative environment with 400,000 colleagues worldwide.