D365 Security and Compliance Officer

The D365 ‘HERO’ Programme is a multi-year global transformation programme in Finance & Operations, implementing Microsoft Dynamics 365 across all our regions. HERO aims to harmonise multiple regional ERPs currently used globally, while respecting our divisional operating models and m-tier specificities. It will create a standardised, single global core ERP model based on the SaaS Microsoft D365 F&O platform. HERO is not just a programme; it is a transformation that is building the foundation for the success of our global business and strengthening us to embrace future growth.

As the D365 Security and Compliance Officer, and as part of the Support (RUN) team, you are responsible for handling, governing, and continuously improving the security, access, and compliance framework of the global D365 ERP platform. The role ensures robust user and role management, as well as Segregation of Duties (SoD), in line with least-privilege principles, while supporting audits, access reviews, and regulatory requirements across regions. You act as a central point of contact for global and regional stakeholders, working closely with IT, security and business teams, as well as vendors (e.g., Microsoft) and partners, to maintain compliance, mitigate risks, and drive continuous improvement of security processes within a complex, integrated D365 ecosystem.

Role-based security, Segregation of Duties (SoD) and Compliance management

• Manage user and role assignments within D365
• Create and update duties and roles in line with Chanel and Microsoft releases
• Maintain the SoD framework by translating Chanel SoD rules into a D365 SoD control matrix
• Ensure the appropriate level of data protection and regulatory compliance (e.g., GDPR)

Audits and Reviews

• Review and optimise security roles to ensure alignment with least-privilege principles and efficient D365 licence usage
• Perform periodic conflict checks in D365 to identify users breaching SoD rules and support mitigation activities
• Lead periodic regional internal reviews (e.g., user and privileged access, Microsoft SOC reports, control action plan execution)
• Act as a point of contact for regional teams to support external audits and manager-led user access reviews
• Maintain documentation and reporting to support audit and compliance activities

Continuous Improvement

• Work with global IT teams (e.g. Infrastructure and Security) on security-related topics (e.g., identity management, penetration testing)
• Collaborate closely with global and regional teams to refine SoD rules and remediation processes

What you will bring:

Education and Experience:

• Extensive experience in D365 role-based security and compliance management
• Functional knowledge of D365 Finance and Operations (Supply Chain) areas
• Familiarity with service management tools and platforms, specifically ServiceNow and Azure DevOps (ADO)
• Familiarity with cloud services and infrastructure

Skills:

• Strong analytical and problem-solving skills
• Excellent communication and interpersonal skills
• Proactive problem-solving mindset
• A collaborative approach

What Chanel can offer you:

• Take part in a global transformation programme across multiple regions and partners
• Be a key partner for business and IT corporate domains, as well as internal and external partners across global corporate services and regions

At Chanel, we are focused on creating an inclusive culture that nurtures personal growth, contributing to collective progress. We believe the uniqueness of each individual increases the diversity, complementarity, and effectiveness of our teams. We strongly encourage your application, as we value the perspective, experience, and potential you could bring to Chanel.