Chief Information Security Officer The European Synchrotron (ESRF)

Lightsources.org; Grenoble; Hybride; EUR 59 000 - 72 000; Plein temps

Avantages offerts par ce poste

Relocation support

International work environment

Competitive compensation package

Résumé du poste

ESRF, Europe’s premier accelerator facility in Grenoble, seeks a CISO to lead cybersecurity strategy across divisions. You will define policy, oversee risk governance, and coordinate security initiatives, reporting to senior management. A Master’s degree and 10–15 years IT experience with cybersecurity are required.

Join a global research environment in a dynamic, international setting with relocation support and a competitive package.

Qualifications

• Master’s degree in CS, Cybersecurity, Information Systems, or related discipline.
• 10–15 years IT experience with at least 3 years in cybersecurity.
• Ability to influence multidisciplinary teams and coordinate cybersecurity initiatives.
• Proven leadership potential or experience leading a small team.
• Excellent communication and interpersonal skills; fluent English.

Responsabilités

• Develop, maintain, and improve ESRF cybersecurity policies, standards, and governance.
• Define cybersecurity roadmap, set priorities, and oversee strategic action plans.
• Coordinate cybersecurity activities across ESRF divisions for a consistent security posture.
• Maintain risk assessment processes, identify risks, and initiate audits as needed.
• Oversee security controls implementation and ensure policy compliance.
• Monitor vulnerability alerts, coordinate remediation, and validate actions.
• Keep IT teams informed about threats and mitigation strategies.
• Design and coordinate cybersecurity awareness and training programs.
• Define KPIs, monitor metrics, and report risks to senior management.

Connaissances

Leadership

Stakeholder coordination

English proficiency

Formation

Master’s degree in Computer Science / Cybersecurity

Outils

ISO/IEC 27001

NIST CSF

CIS Controls

EBIOS

Description du poste

At a glance

• Job title:Chief Information Security Officer
• Ref.:26-29-P-DIR-DGO
• Contract type:Permanent contract
• Working time:Full-time job
• Salary range:65 K€ minimum
• Publication start on Front Office : Site internet:19/08/2026

Context & Job description

The ESRF is a world-class research facility that produces extremely intense X-ray beams to enable scientists to explore matter at the nanoscale. Information Technology systems and services are essential to the successful operation of all ESRF Divisions. Ensuring that the ESRF’s digital infrastructure, scientific computing environment, and software solutions are effectively protected against cyber threats is therefore of critical importance.

The ESRF’s infrastructure, the software solutions and services are developed and operated by several IT teams across the Experiments Division, the Instrumentation Services and Development Division, and the Technical Infrastructure Division, but also the Accelerator and Source Division and the Administration Division.

As Chief Information Security Officer (CISO), you will define and drive the ESRF’s cybersecurity strategy while fostering a strong security culture across the organisation. Although the role has no direct line management responsibility over the IT teams, you will provide strategic leadership, coordinate cybersecurity initiatives across divisions, and build consensus among multiple stakeholders.

Key Responsibilities

• Develop, maintain, and continuously improve the ESRF’s cybersecurity policies, standards, and governance framework.
• Define the cybersecurity roadmap, establish priorities, and oversee the implementation of strategic action plans.
• Coordinate cybersecurity activities across all ESRF divisions to ensure a consistent and effective security posture.
• Maintain the organization’s cybersecurity risk assessment process, identify emerging risks, and initiate internal or external security audits where appropriate.
• Oversee the implementation of security controls by the IT teams and ensure compliance with cybersecurity policies and best practices.
• Monitor vulnerability alerts, coordinate vulnerability management activities, and validate remediation actions.
• Keep IT teams informed of emerging cyber threats, vulnerabilities, and appropriate mitigation strategies.
• Design, launch, and coordinate cybersecurity awareness and training programmes for ESRF staff.
• Define cybersecurity Key Performance Indicators (KPIs), monitor security metrics, and regularly report on cybersecurity risks and performance to senior management.

Expected profile

The successful candidate should possess the following qualifications and experience:

• A Master’s degree (or equivalent) in Computer Science, Cybersecurity, Information Systems, or a related discipline.
• At least 10 to 15 years of professional experience in Information Technology, including a minimum of 3 years in cybersecurity.
• Demonstrated ability to influence multidisciplinary teams and coordinate cybersecurity initiatives across multiple departments.
• Proven leadership skills or strong potential to lead a small team.
• Excellent communication and interpersonal skills, with the ability to interact effectively with technical specialists, researchers, and senior management.
• Excellent written and spoken English.

Technical Skills

The ideal candidate will have:

• Strong knowledge of cybersecurity governance and risk management frameworks, including ISO/IEC 2700X, NIST Cybersecurity Framework, CIS Controls or EBIOS.
• Good technical knowledge in Linux and Windows environments, and network.
• Experience with vulnerability management, security monitoring technologies, and incident response.
• Good understanding of cloud security, virtualization technologies, and modern IT infrastructures security practices.
• Knowledge of GDPR, the NIS2 Directive, and cybersecurity compliance requirements.

Experience securing large-scale scientific IT environments would be a strong advantage.

Desirable Qualifications

The following certifications would be considered an asset:

• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)
• ISO/IEC 27001 Lead Implementer or Lead Auditor

Previous experience in an international scientific or research environment would also be considered an advantage.

Working conditions

Permanent contract.

The salary will be calculated on the basis of relevant qualifications and professional experience.

What makes the ESRF experience unique…

Join an innovative international research institute, with a workforce from 38 different countries

Collaborate with global experts to advance science and address societal challenges

Come and live in a vibrant city, in the heart of the Alps, and Europe’s Green Capital 2022

Enjoy a workplace designed to support your quality of life

Benefit from our competitive compensation and allowances package, including financial support for your relocation to Grenoble

For further information on employment terms and conditions, please refer to “What we offer” section of our Careers page https://www.esrf.fr/Jobs

The ESRF is an equal opportunity employer and encourages applications from disabled persons.

Company description

The European Synchrotron, the ESRF, is an international research centre based in Grenoble, France.

Through its innovative engineering, pioneering scientific vision and a strong commitment from its 700 staff members, the ESRF is recognised as one of the top research facilities worldwide. Its particle accelerator produces intense X-ray beams that are used by thousands of scientists each year for experiments in diverse fields such as biology, medicine, environmental sciences, cultural heritage, materials science, and physics.

Supported by 19 countries, the ESRF is an equal opportunity employer and encourages diversity.