CHIEF INFORMATION SECURITY OFFICER (CISO) / HEAD OF SECURITY

Wibx; Barcelonne; Sur place; Confidentiel; Plein temps

Résumé du poste

Une entreprise dynamique recherche un Chief Information Security Officer (CISO) pour diriger sa stratégie de cybersécurité. Le candidat idéal aura plus de 10 ans d'expérience, une solide formation en cybersécurité ainsi que des compétences en gestion des risques et leadership. Ce rôle implique la création de politiques de sécurité, la gestion d'une équipe de réponse aux incidents, et la garantie de conformité à travers toutes les filiales. Un niveau professionnel en anglais est requis pour la communication internationale.

Qualifications

• 10+ années d'expérience en sécurité de l'information.
• Connaissance des cadres de sécurité (ISO 27001, NIST).
• Capacité à diriger des audits de sécurité et des tests de pénétration.

Responsabilités

• Développer et maintenir une stratégie de cybersécurité complète.
• Diriger une équipe d'incidents et construire un SOC.
• Surveiller la conformité des filiales aux normes de sécurité.

Connaissances

Gestion de l'incident

Gestion des risques

Leadership

Communication

Formation

Diplôme de Master en Informatique ou Cybersécurité

Certifications: CISSP, CISM, CISA

Description du poste

Vos missions

We are seeking a highly experienced and strategic Chief Information Security Officer (CISO) to lead and oversee the organization’s global cybersecurity strategy, policies, and governance. The CISO will play a pivotal role in protecting the company's critical assets, including information systems, networks, intellectual property, and data across all business units and subsidiaries.

This executive position will also be responsible for coordinating the certification and compliance efforts of the company's subsidiaries, ensuring alignment with group-wide cybersecurity standards and regulatory requirements.

Key Responsibilities

Cybersecurity Strategy & Governance

• Develop, implement, and maintain a comprehensive cybersecurity strategy aligned with business objectives and risk appetite.
• Maintain the Information Security Management System (ISMS) for the group.
• Establish policies, standards, and frameworks to continuously improve the company’s security posture.

Risk Management & Asset Protection

• Identify, evaluate, and mitigate cybersecurity risks across the organization and its subsidiaries.
• Conduct regular security risk assessments and penetration testing to protect systems and data.
• Lead efforts to secure critical infrastructure, proprietary data, and operational technologies

Subsidiary Certification & Alignment

• Coordinate and oversee the cybersecurity certification processes (e.g., ISO 27001, NIS2, DORA ) across all subsidiaries.
• Support local Managers to ensure harmonization of security standards across the group.
• Monitor subsidiary compliance with group policies, legal and regulatory frameworks.

Incident Response & Threat Management

• Build and lead a Security Operations Center (SOC) and incident response team.
• Build and lead a Vulnerability Operations Center ( VOC)
• Drive Cyber Crisis Simulation Exercise
• Develop and execute incident response plans and forensics capabilities.
• Stay up to date with emerging threats, vulnerabilities, and regulatory changes.

Awareness, Training & Culture

• Promote a strong security culture within the organization.
• Define and implement security awareness training programs for all employees.
• Serve as the internal advocate for security best practices.

Stakeholder Communication & Reporting

• Report regularly to executive leadership and the Board of Directors on cybersecurity risks, incidents, and compliance status.
• Act as the key contact for external auditors, regulators, and partners regarding information security matters.

Vos compétences

Education

• Master's degree in Computer Science, Cybersecurity, or related field.
• Relevant certifications preferred: CISSP, CISM, CISA, ISO 27001, SANS/GIAC.

Experience

• 10+ years in information security.
• Proven experience in security governance, risk management, and regulatory compliance (e.g., ISO 27001, GDPR, NIS2).
• Strong background in IT infrastructure.

Skills

• Deep knowledge of threat landscapes, incident response, mitigation strategies.
• Familiarity with security frameworks: ISO 27001, NIST, CIS Controls, OWASP.
• Capable of leading security audits, penetration tests, BCP/DRP, and compliance assessments.
• Understanding of legal and regulatory cybersecurity issues.

Soft Skills & Leadership

• Strong leadership and team management skills.
• Excellent communicator, able to engage both technical teams and executive leadership.
• Strategic thinker, able to align security vision with business goals.
• Analytical mindset, crisis management, and prioritization skills.

Languages

• Professional English (spoken and written) required for international communication.