CyberSecurity Compliance Officer

About the role

We are seeking a proactive, detail‑oriented Information Security professional to strengthen Sodexo’s security and compliance landscape. You will support the continuous improvement of our Information Security Management System (ISMS) and drive alignment with ISO 27001, NIS2, AI Act, PCI‑DSS and other relevant frameworks.

Key responsibilities

• Build and manage an annual consolidated Information Security Compliance Programme, providing visibility of internal and external audit activities.
• Deliver clear security compliance reporting to the CISO, IT, and senior business leadership.
• Coordinate NIS2 compliance activities across multiple regions and maintain Risk Management Accreditation Document Sets (RMADS).
• Ensure the ISMS is aligned with ISO 27001/27002, develop policies, manage documentation, and conduct regular audits.
• Perform third‑party security assurance assessments and project risk evaluations.
• Collaborate with Legal to embed appropriate security clauses in contracts.

Required profile

• Proactive and detail‑oriented with strong analytical skills.
• Experience in managing information security compliance programmes.
• Ability to communicate effectively with senior leadership and cross‑functional teams.
• Familiarity with European regulatory requirements and risk management methodologies.

Required skills

• ISO 27001 / ISO 27002
• NIS2 compliance
• PCI‑DSS
• Risk management methodologies (e.g., DART)
• Security audit and assessment
• Information Security Management System (ISMS) governance

What we offer

• Opportunity to work in a global leader of quality‑of‑life services.
• Exposure to a wide range of European markets and regulatory frameworks.
• Collaborative environment with dedicated colleagues across 64 countries.