CISO / Head of IT & Security - Freelance - Onsite Paris

Project overview

Context

Our client is a fast-growing French tech company, present in France and internationally.

Security has become an immediate priority: the client is looking for a CISO capable of leading security governance, product security, and IT system management, while overseeing a small Franco-English team.

Main Responsibilities

Security Governance

Product Security

IT System Management and Operations

Management and Processes

Candidate Profile

Profiles whose experience primarily relates to IT system operations, without practical experience in security governance or product security, will not be considered. The same applies to profiles whose English is not sufficient for daily spoken management of a team member.

• Start Date: ASAP
• Duration: Long-term full-time mission, with possible permanent CDI conversion
• Location: Paris intra-muros, full-time onsite presence required
• Working Language: Fluent English essential, both spoken and written (daily management of an engineer based abroad)
• Reporting to: Director of Software Engineering, with direct access to the CEO on security matters
• Define and evolve the IT security policy, based on ISO 27001 best practices (without a short-term certification objective)
• Conduct risk analysis and present it to the CEO in regular reviews
• Lead security incident management and GDPR compliance
• Raise team awareness on best practices
• Lead service security with the software team
• Organize and monitor penetration tests
• Respond to client security questionnaires and audits, contribute to due diligence
• Define and manage the IT and security roadmap, as well as the associated budget (Capex/Opex)
• Supervise and secure the infrastructure, network, and cloud hosting (OVH, Azure)
• Deploy operational security tools (especially EDR) and disaster recovery plans (DRP/BCP) for critical tools
• Administer work environments (Google Workspace, Office 365) and support business units on their tools
• Supervise two system engineers, in France and the United States, while remaining a hands-on contributor
• Structure internal support (ticketing, SLA, KPI) and ITIL processes
• Manage IT purchasing, service providers, and inventory
• Higher education in IT or equivalent
• 10 to 15 years of experience in system and network administration, with a progression towards overall IT system management
• At least 5 years in information security, both operational and governance
• Concrete experience with ISO 27001 or SOC 2 frameworks (implementation, not just knowledge of the standard)
• Experience with SaaS product security: penetration tests, client audits, due diligence
• First successful experience managing a small team, while remaining hands-on (infrastructure, network, EDR)
• Operational skills: OVH and Azure cloud, Linux, Google Workspace, and Office 365
• Fluent English essential, with real spoken fluency
• Ability to defend a plan and budget, including in crisis situations
• We are primarily looking for an autonomous, rigorous, and pedagogical profile with users, comfortable in a fast-evolving deeptech environment. ITIL is a plus.

Project details

• Start: flexible
• Remote: hybrid
• Location: Paris, France, FR
• Rate: 74-74 EUR/h
• Languages: French