CISO (F/N/M)

Adevinta 2021; Avallon, Paris; Hybride; EUR 150 000 - 200 000; Plein temps

Résumé du poste

Une entreprise innovante recherche un CISO pour définir et mettre en œuvre des politiques de sécurité. Ce rôle clé implique la gestion des risques de sécurité, la sensibilisation et la formation des équipes, tout en garantissant la conformité réglementaire et l'intégrité des systèmes d'information. Vous aurez l'occasion de travailler dans un environnement dynamique et Agile, où votre capacité à convaincre et à collaborer sera essentielle. Si vous êtes passionné par la sécurité de l'information et souhaitez faire une différence au sein d'une organisation en pleine croissance, cette opportunité est faite pour vous.

Qualifications

• Expérience en gestion d'équipe souhaitée.
• Compétences techniques en sécurité des systèmes d'information appréciées.

Responsabilités

• Définir et surveiller la mise en œuvre de la politique de sécurité des systèmes d'information.
• Analyser les risques de sécurité des systèmes d'information.

Connaissances

Capacité à convaincre et à transmettre des idées

Compétences pédagogiques

Travail inter-départemental

Rigueur

Orientation résultats

Adaptabilité en environnement Agile

Outils

Technologies de sécurité de l'information

Conformité réglementaire

Gouvernance de l'information

Description du poste

Within the Information Systems Department, the CISO (Chief Information Security Officer) is responsible for defining and implementing the company's security policy.
They work in concert with the security team in charge of operational cybersecurity, as well as the DPO (Data Protection Officer) of the leboncoin group and the Adevinta CISO. The goal is to ensure security, confidentiality, traceability, regulatory compliance, and integrity of the information system and data.

The CISO is responsible for implementing processes related to the availability, integrity, and confidentiality of information about customers, business partners, employees, and companies in accordance with the organization's information security policies.

Their mission includes:

1. Defining, disseminating, and monitoring the implementation of the Information Systems Security Policy.
2. Analyzing information systems security risks.
3. Selecting security measures and defining and monitoring implementation plans.
4. Raising awareness, training, and advising on information systems security issues.
5. Developing data backup strategy.
6. Implementing a business continuity plan.
7. Strategizing physical security of premises in relation to general services.

The scope of intervention is the leboncoin group, namely leboncoin and all its subsidiaries.

Qualifications:

We are looking for a profile with soft skills, namely:

1. Ability to convince and convey ideas
2. Teaching skills
3. Ability to onboard and work across departments without hierarchical links
4. Rigorous
5. Ability to work in an Agile environment where teams constantly adapt
6. Results-oriented

Technical skills would also be a significant plus:

1. Basics of the OSI model (flow security, http concepts, layer 2 security, IDS/IPS/WAF)
2. Basics of encryption (asymmetric vs. symmetric)
3. Notions of secure development (sanitizing variable values)
4. Able to describe, technically and in broad terms, how a company compromise unfolds
5. Must know and be able to explain the limitations of defensive security
6. In-depth knowledge of information security technologies, regulatory compliance, information governance, and privacy best practices

You also got some experience in managing a team.

Additional information:

1. Position based in Paris
2. Compensation based on education level / experience level
3. Partial remote work possible