Avon is a global beauty company with operations in more than 50 countries, serving millions of customers through a network of millions of independent representatives. Founded in 1886, the company sells cosmetics, skincare, fragrance, and personal care products via its direct-selling model. It is part of the Natura &Co family.
The threat model for a company at this scale is broad. A direct-selling platform operating across 50-plus countries means handling personally identifiable information and payment data from both end customers and a massive, distributed force of independent representatives. The attack surface spans e-commerce infrastructure, mobile applications used by representatives, and supply chain systems connecting global manufacturing and distribution.
Security teams operating in this environment deal with the realities of a legacy enterprise that has undergone digital transformation - securing hybrid cloud environments, protecting a high-volume transaction pipeline, and defending against fraud targeting the representative network. The Natura &Co umbrella adds another layer: coordinating security posture and incident response across a conglomerate of consumer brands.
Avon's stated commitment to empowerment and inclusion extends to its workforce culture, but for cybersecurity professionals, the concrete draw is the operational complexity. Fifty-plus regulatory jurisdictions, millions of user records, and a business model that depends on trust between brand, representative, and customer make security a first-order concern rather than an afterthought.
