Information Systems Security Officer (M/F)

Job Description

The Group CISO will be responsible for defining, driving, and monitoring the Group's cybersecurity strategy, with four main objectives:

1. Reduce the Group's exposure to cyber risks that could affect its business, data, customers, or image.
2. Work in collaboration with the IT department to ensure that best practices are implemented at the IS level.
3. Guarantee our ability to meet regulatory, contractual, and customer security requirements.
4. Structure the preparation and monitoring of audits, ensuring the implementation and closure of associated action plans.
5. Provide management with a consolidated view of the cyber risk level, priorities, and actions undertaken.

Your main responsibilities

The Group CISO will notably be responsible for:

• Defining the Group's cybersecurity strategy and roadmap;
• Identifying and assessing the main cyber risks to which the Group is exposed;
• Proposing priorities and investments necessary for their management to management;
• Defining the security rules and policies applicable to the Group;
• Coordinating cybersecurity actions between different entities;
• Supporting subsidiaries and strategic projects on security topics;
• Driving compliance with various requirements applicable to the Group;
• Preparing and coordinating client, regulatory, and internal audits;
• Managing remediation plans resulting from these audits;
• Structuring the management and escalation of cyber incidents;
• Developing cybersecurity awareness and culture among employees and management;
• Assessing risks related to critical suppliers and partners;
• Implementing indicators allowing management to regularly monitor the risk level and the progress of the roadmap.

Requirements

Ideally: 5 to 10 years of experience in cybersecurity, including experience in security governance or management.

Experience in an environment:

• Industrial;
• Aerospace;
• Defense;
• International;

Skills

The candidate must master or be familiar with:

• Cybersecurity governance;
• Risk analysis;
• Audit management;
• Incident management;
• Vulnerability management;
• IAM;
• Cloud Security;
• Infrastructure security;
• Supplier management;
• Business continuity;
• Security frameworks;
• Microsoft 365 / Azure / Entra ID environment.
• Having knowledge of physical security (buildings, badges, etc.)

A good command of professional English also seems essential given the Group's scale.

Expected qualities

Beyond technical expertise:

• Ability to work transversally;
• Leadership;
• Pragmatism;
• Analytical and synthesis skills;
• Ability to prioritize based on risk;
• Ability to challenge teams and suppliers;
• Diplomacy;
• Pedagogy;
• Comfortable with management and leadership;
• Ability to explain technical issues in terms of business risk.

Benefits

SOGECLAIR Group is convinced that diversity and inclusion are essential elements of its performance and is committed to recruiting without discrimination.
For clarity, the masculine form is used in this advertisement, but we encourage applications from all individuals, regardless of gender, origin, disability, or any other characteristic.

Work @Sogeclair ✨:

• An international and multicultural work environment 🌎
• Opportunities for internal mobility
• Continuous learning: Sogeclair Academy 🎓
• A compensation package: RTT, health insurance, sustainable mobility package, co-optation bonus, meal vouchers, etc.

Learn more about us 💠:

SOGECLAIR, with over 60 years of expertise, is a provider of innovative solutions for more sustainable and safer mobility. Present internationally, SOGECLAIR has extended its influence beyond borders, thus strengthening its ability to innovate and collaborate with partners worldwide.

Our values:

• Trust and team spirit 💙
• Performance and innovation 💡
• Responsibility and commitment 🤝
• Fairness and ethics in business ⚖️

Find more English Speaking Jobs in France on Arbeitnow