CISO, Hybrid Role | Lead Multi-Cloud Security & Compliance

Epex Spot; Paris; Hybrid; EUR 120,000 - 190,000; Full time

Benefits offered by this job

Hybrid working

Training budget

Career progression

Internal mobility

Leadership development

Job summary

EPEX SPOT SE is seeking a Chief Information Security Officer (CISO) to coordinate protection of client data and systems across multiple European countries in a multi-cloud environment. You will report to C-level and the Supervisory Board, harmonize reporting requirements, and drive NIS2, NCCS, and ISO 27001 initiatives to turn security into a value driver for the business.

You will lead security strategy, governance, and incident response, directing SOC/SIEM and MSSP partners, while embedding

Qualifications

• Bachelor’s degree or equivalent experience.
• CISSP or similar certification is a plus.
• Agile or Scrum certification (e.g. PSM, CSM) is a plus.
• At least 5 years of experience as a CISO with reporting to C-level/Boards.
• Experience with multiple teams and stakeholders in complex environments.

Responsibilities

• Lead team and partner governance with C-level and Supervisory Board reporting.
• Develop and own the company-wide security strategy and risk ownership.
• Drive regulatory compliance for NIS2, NCCS and ISO 27001 programs.
• Oversee security operations, incident response, and reporting to executives.
• Lead multi-cloud security direction and secure-by-design practices.
• Oversee vulnerability, asset, and third-party risk management.

Skills

DevSecOps

Cloud security (AWS/Azure/GCP)

GCP IAM & controls

Leadership

Communication

Critical thinking

Emotional intelligence

Conflict resolution

Adaptability

Coaching & mentoring

Education

Bachelor’s degree or equivalent experience

CISSP or similar certification

Agile or Scrum certification (e.g. PSM, CSM)

Tools

Cloud platforms

Job description

EPEX SPOT SE is seeking a Chief Information Security Officer (CISO) to coordinate protection of client data and systems across multiple European countries in a multi-cloud environment. You will report to C-level and the Supervisory Board, harmonize reporting requirements, and drive NIS2, NCCS, and ISO 27001 initiatives to turn security into a value driver for the business.

You will lead security strategy, governance, and incident response, directing SOC/SIEM and MSSP partners, while embedding