CISO / Information Security Manager - Freelance (long-term assignment)

Project overview

Context

Our client is a fast-growing French tech company, present in France and abroad;

Security has become an immediate priority: the client is looking for a CISO capable of leading security governance, product security, and SI management, while overseeing a small Franco-English team.

Main Responsibilities

Security Governance

Product Security

SI Management and Operations

Management and Processes

• Start Date: ASAP
• Duration: Long-term full-time assignment, with possible permanent CDI conversion
• Location: Paris intra-muros, full-time on-site presence required
• Working Language: Fluent English essential, both spoken and written (daily management of an engineer abroad)
• Reporting to: Director of Software Engineering, with direct access to the CEO on security matters
• Define and evolve the SI security policy, based on ISO 27001 best practices (without short-term certification objective)
• Lead risk analysis and present it to the CEO in regular reviews
• Oversee security incident management and GDPR compliance
• Raise team awareness of best practices
• Lead service security with the software team
• Organize and monitor penetration tests
• Respond to client security questionnaires and audits, contribute to due diligence
• Define and manage the IT and security roadmap, as well as the associated budget (Capex/Opex)
• Supervise and secure infrastructure, network, and cloud hosting (OVH, Azure)
• Deploy operational security tools (especially EDR) and disaster recovery plans for critical tools
• Administer work environments (Google Workspace, Office 365) and support business units on their tools
• Supervise two system engineers, in France and abroad, while remaining a contributor
• Structure internal support (ticketing, SLA, KPI) and ITIL processes
• Manage IT purchasing, service providers, and inventory

Project details

• Start: flexible
• Remote: onsite
• Location: Paris, France, FR
• Languages: French