CISO / Head of IT & Security - Freelance - Onsite Paris

Project overview

As part of strengthening its security posture, our client, a fast-growing French tech company with a presence in France and internationally, is looking for a freelance CISO / Head of IT & Security. Security has become an immediate priority: you will be responsible for security governance, product security, and IT system management, leading a small Franco-English team.

You will report to the Director of Software Engineering, with direct access to the CEO on security matters.

Security Governance

Product Security

IT System Management and Operations

Management and Processes

Profile Sought

Expected Experience

Skills

Languages and Soft Skills

Profiles whose experience primarily relates to IT system operations, without practical experience in security governance or product security, will not be considered. The same applies to profiles whose English level does not allow for daily oral management of an employee.

Work Environment

You will be working for a fast-growing French tech company in the B2B services sector, present in France and internationally. The context is a rapidly evolving deeptech environment where security has become an immediate priority.

You will be part of a Franco-English team: English is the working language on a daily basis, both spoken and written. You will manage two system engineers based in France and the United States.

Technical Environment and Framework

Conditions

• Define and evolve the IT security policy, based on ISO 27001 best practices (without a short-term certification objective)
• Conduct risk analysis and present it to the CEO during regular reviews
• Manage security incident response and GDPR compliance
• Raise awareness among teams on best practices
• Own the service security with the software team
• Organize and monitor penetration tests
• Respond to client security questionnaires and audits, and contribute to due diligence
• Define and manage the IT and security roadmap, as well as the associated budget (Capex/Opex)
• Supervise and secure the infrastructure, network, and cloud hosting (OVH, Azure)
• Deploy operational security tools (especially EDR) and disaster recovery plans (DRP) for critical tools
• Administer work environments (Google Workspace, Office 365) and support business units on their tools
• Supervise two system engineers, in France and the United States, while remaining a contributor
• Structure internal support (ticketing, SLA, KPI) and ITIL processes
• Manage IT purchasing, service providers, and inventory
• 10 to 15 years of experience in system and network administration, with a progression towards overall IT system management
• At least 5 years in information security, both operational and governance
• Hands-on experience with ISO 27001 or SOC 2 frameworks (implementation, not just knowledge of the standard)
• Experience in SaaS product security: penetration tests, client audits, due diligence
• First successful experience managing a small team, while remaining hands-on (infrastructure, network, EDR)
• OVH and Azure Cloud, Linux, Google Workspace, and Office 365
• Ability to defend a plan and budget, including in crisis situations
• ITIL is a plus
• Fluent English is essential, with real oral fluency (daily management of an employee abroad)
• Autonomous, rigorous, pedagogical profile with users, comfortable in a fast-evolving deeptech environment
• Higher education in computer science or equivalent
• Cloud hosting: OVH, Azure
• Work environments: Google Workspace, Office 365
• Frameworks: ISO 27001, SOC 2, ITIL
• Regulations: GDPR
• Location: Paris intra-muros, 100% onsite presence mandatory
• Schedule: full-time, 5 days per week
• Start date: November 16, 2026
• Duration: 12 months, with a possible permanent internal position (CDI)

Project details

• Start: 15/11/2026
• Duration: 12 mois renouvelable
• Location: Paris, France, FR
• Rate: 68-80 EUR/h
• Languages: French