For over 100 years, we’ve been by your side, all across France!

At Danone, we believe growth is something to be savored. That’s why our 26 brands are part of the everyday lives of French consumers, offering delicious products that bring enjoyment while taking care of oneself and loved ones. With more than 8,000 Danoners across 13 production sites, 7 warehouses, 3 headquarters and an R&D center, Danone continuously works on developing and enhancing iconic products found in your kitchens, supermarkets, restaurants, cafés, as well as in healthcare facilities and pharmacies. Certified B Corp and Happy Trainees, Danone does not aim to be the best company in the world, but a better company for the world. We strive to offer the very best to both our consumers and our people.

The Global Privileged Access Manager is accountable for the strategy, implementation, operation, and continuous improvement of Privileged Access Management across Danone. The role serves as the global owner of all privileged access services, ensuring that administrative access to critical business systems, infrastructure, cloud platforms, applications, and operational technologies is managed according to the highest security standards.

The position is responsible for deploying and expanding privileged access controls across all Danone domains and environments while ensuring long-term sustainability, operational excellence, regulatory compliance, and cyber resilience. The role also provides governance and oversight for Tier-0 security operations and supports the protection of Danone's most critical identity and infrastructure assets.

Key Accountabilities

Global PAM Service Ownership

• Own the end-to-end Privileged Access Management service globally.
• Define the vision, strategy, operating model, and multi-year roadmap for privileged access.
• Ensure services remain aligned with business priorities, cybersecurity strategy, and regulatory requirements.
• Establish measurable service KPIs, operational standards, and governance processes.
• Drive service adoption and maturity across all business units and regions.

Enterprise-Wide PAM Deployment

• Lead the implementation and rollout of privileged access controls across all Danone domains, platforms, and technologies.
• Expand coverage of privileged account governance to infrastructure, cloud, applications, OT environments, third parties, and service accounts.
• Ensure new systems and projects adopt privileged access standards by design.
• Standardize privileged access processes globally while accommodating local business requirements.
• Tier-0 Security & Critical Identity Services
• Provide governance and oversight for Tier-0 administration and security controls.
• Support the sustainability and continuous improvement of Tier-0 protection services.
• Ensure privileged access to Active Directory, Entra ID, identity platforms, PKI, and other critical infrastructure follow approved security controls.
• Partner with AD, Infrastructure, and Security teams to maintain the highest level of protection for Danone's identity "crown jewels."

Security Control Sustainability

• Ensure privileged access controls remain effective, auditable, and sustainable over time.
• Define operational processes that maintain security standards beyond initial deployments.
• Drive continuous control validation, remediation, and improvement activities.
• Establish lifecycle management for privileged accounts, service accounts, emergency accounts, and administrative identities.

Risk, Compliance & Governance

• Lead privileged access reviews, certifications, and risk assessments.
• Report PAM maturity, control effectiveness, and risk exposure to senior leadership.
• Act as the escalation point for privileged access-related risks and control gaps.
• Business Enablement & Stakeholder Management
• Enable secure administrative access without impacting business operations.
• Partner with Infrastructure, Cloud, OT Security, Application teams, and external suppliers.
• Manage relationships with PAM technology vendors and service providers.

The criteria below remain indicative. A candidate who has a different combination of experience and skills could also be considered.

• 8+ years of experience in IAM, Cybersecurity, Infrastructure Security, or Security Service Management.
• Proven track record leading enterprise-scale PAM programs and securing critical identity and Tier-0 environments.
• Strong expertise in governance, risk management, compliance, and service ownership.
• Experience working with global stakeholders, cross-functional teams, and external service providers.
• Demonstrated ability to drive strategic initiatives, change management, and continuous improvement.

We are proud to promote diversity and equal opportunity within our teams. We believe that our differences will make a difference, and that an inclusive work environment will drive our growth as a company, as a team, and as individuals. We will therefore consider all applications* by fostering an inclusive work culture where everyone can feel at home.

We have also chosen to remove inclusive writing from our job offers because its complexity penalizes people with cognitive disabilities, including dyslexia, dysphasia, or apraxia.

*All nominations will be considered regardless of origin, background, religion, sex, sexual orientation, gender identity, disability…

One Planet, One Health - BY YOU !

Our four core values "HOPE": HUMANISM, OPENNESS, CLOSENESS and ENTHUSIASM serve as our compass.

Every day, you will make decisions that impact our economic and societal performance, as well as our ability to achieve our ambitions.
At Danone, you can just be yourself. We are convinced that it is up to YOU to define how you work, develop and progress.
With us, you will work in a challenging, authentic, and caring environment.

Want to know more about the daily life of our danoners? Check out our LinkedIn page and our @DanoneTalentFrance Instagram account.

You want to take action to bring health through food to as many people as possible? Join us!

#LI-FR (for external – to be in white so it doesn’t show in the ad)