Chief Information Security Officer (CISO)

About the role

We are seeking a strategic and hands‑on Chief Information Security Officer to define and execute our information security vision across the organization. Reporting to senior leadership, the CISO will shape security policy, manage risk, and lead incident response for a multinational environment.

Key responsibilities

• Develop and maintain a multi‑year security strategy aligned with business goals, regulatory requirements (ISO 27001, NIST, GDPR, DORA, NIS2) and emerging threats.
• Advise executive leadership and governance bodies on cyber‑risk exposure, threat trends, and security investment decisions.
• Own the Information Security Management System (ISMS), ensuring certification and compliance across all geographies.
• Lead enterprise‑wide risk assessments, threat analyses, and risk‑treatment plans with clear accountability.
• Oversee security monitoring, SOC operations, vulnerability management, incident handling and act as escalation point during major cyber incidents.
• Design, test and maintain business continuity, disaster recovery and crisis‑management frameworks.
• Build, mentor and retain a high‑performing cybersecurity team, fostering a culture of security awareness.
• Represent the organization with regulators, auditors and external partners, ensuring alignment with legal and compliance functions.

Required profile

• Degree in Computer Science, Cybersecurity or a related discipline.
• Minimum 8 years of progressive experience in information security, risk management or related fields.
• Fluent in French and English.
• Proven track record of leading security programs in complex, multi‑jurisdictional environments.

Required skills

• ISO 27001, NIST, GDPR, DORA, NIS2 frameworks.
• Security‑by‑design and privacy‑by‑design implementation.
• SOC management, vulnerability management, incident response.
• Business continuity, disaster recovery and crisis management.
• Threat intelligence, red‑team operations, forensic investigation.
• Third‑party, supplier and cloud security assessments.
• Risk assessment, risk treatment planning, governance and compliance.