Patch Velocity & Software Lifecycle Lead

Start free →

Or apply yourself on the official page →

About the role

Le contenu du poste est libellé en anglais car il nécessite de nombreuses interactions avec nos filiales à l’international, l'anglais étant la langue de travail. This job offer is accessible to all, regardless of gender. Job title: Patch Velocity & Software Lifecycle Lead Location: Lyon or Gentilly, France Type: Permanent,Full-time,Hybrid   About the job At Sanofi, we are strengthening our cybersecurity posture by accelerating the remediation of vulnerabilities and enforcing robust software lifecycle governance. As Patch Velocity & Software Lifecycle Lead within our Vulnerability Operations Center Team, you’ll play a critical role in reducing the organization’s exposure to cyber risks by driving patching velocity and coverage, controlling software obsolescence, and ensuring compliance across our Digital landscape. This role combines operational acceleration, effective orchestration and transversal leadership to deliver measurable risk reduction at scale. One-line Mission :Accelerate vulnerability remediation and enforce software lifecycle governance to sustainably reduce Sanofi’s exposure to cybersecurity risks. Ready to get started? About Sanofi: We’re an R&D-driven, AI-powered biopharma company committed to improving people’s lives and delivering compelling growth. Our deep understanding of the immune system – and innovative pipeline – enables us to invent medicines and vaccines that treat and protect millions of people around the world. Together, we chase the miracles of science to improve people’s lives. Main responsibilities Drive Patch Velocity & Remediation Performance • Accelerate patch deployment across servers, middleware, endpoints, and application layers • Reduce Mean Time To Patch (MTTP) and vulnerability backlog • Ensure adherence to remediation SLAs, especially for critical and high-risk vulnerabilities • Identify and remove bottlenecks impacting remediation speed Enforce Software Lifecycle & Obsolescence Management • Define and drive software lifecycle standards (EOL/EOS management) • Ensure continuous upgrade and modernization of software components • Reduce risks related to obsolete and unsupported technologies Strengthen Software Governance & Catalog Control • Enforce compliance with the Digital-approved software catalog • Implement mechanisms to detect and remove unauthorized software • Reduce exposure linked to shadow IT and unmanaged software components Ensure Security Compliance by Design • Guarantee that systems are secure and compliant at delivery (golden images, baselines) • Maintain compliance throughout the asset lifecycle • Embed patching and lifecycle requirements into operational processes Define Policies, Standards & Operating Model • Formalize patch management and software lifecycle policies • Define clear roles, responsibilities, and governance frameworks • Ensure alignment between Security, IT, and Business stakeholders Drive Transversal Execution • Engage and align cross-functional teams: • Infrastructure & Cloud • Digital Workplace • Application Owners • CyberSecurity & Risk and Compliance • Activate the right organizational and technical levers to meet objectives Measure Performance & Drive Continuous Improvement • Define and monitor key KPIs: • Mean Time To Patch (MTTP) • SLA compliance for vulnerability remediation • Patch and lifecycle compliance rates • Unauthorized software rate • Track progress and ensure sustainable improvement (non-regression) • Provide clear reporting and executive visibility About you Experience: • Proven experience in cybersecurity, vulnerability management, or infrastructure security • Track record in driving cross-functional transformation or remediation programs • Strong understanding of: • Patch management processes

View the official posting →