Global Information Security & Compliance Leader

Oticon Medical; Nice; Sur place; EUR 110 000 - 140 000; Plein temps

Résumé du poste

Oticon Medical in Vallauris, France, develops bone-anchored hearing systems within an international group. We seek an Information Security & Compliance Manager to define, deploy, and continuously improve measures that ensure the security, availability, integrity, and confidentiality of health data.

You will drive the organization’s cybersecurity strategy, risk management framework, and compliance roadmap, aligning ISMS with ISO 27001, GDPR, and health data hosting standards (HDS) where

Qualifications

• Master's degree in Engineering, Cybersecurity, or Information Systems Security.
• 5-10 years of experience as a CISO or similar information security leadership role.
• Proven hands-on experience leading an ISO 27001 ISMS, including end-to-end project management.
• Strong command of GDPR, ISO 27001, HDS, EBIOS RM.
• Solid technical expertise: secure architecture, IAM, SOC/SIEM, PKI, vulnerability management.
• Strong executive-level communication and leadership skills.
• Knowledge of AI governance and responsible AI security principles.

Responsabilités

• Define, maintain, and deploy the Information Systems Security Policy and the ISO 27001-based Information Security Management System.
• Ensure alignment with GDPR, ISO 27001, HDS, and healthcare data protection requirements.
• Lead cybersecurity risk management, including asset and risk mapping, EBIOS RM analysis, and risk treatment plans.
• Report regularly to senior management on cybersecurity risks, compliance status, key indicators, dashboards, and roadmap progress.
• Define and oversee secure architecture, infrastructure, identity and access management, monitoring tools, encryption, and certificate management.
• Supervise backup, business continuity, disaster recovery, incident response, and cyber crisis exercises, including ransomware and data exfiltration scenarios.
• Prepare and support audits, penetration tests, vulnerability scans, remediation plans, and threat monitoring activities.
• Deploy cybersecurity awareness initiatives and manage security requirements for suppliers and subcontractors, including contracts and audits.

Connaissances

CISO leadership

ISO 27001

GDPR compliance

Information security

IAM management

SOC/SIEM

Vulnerability management

Executive communication

AI governance

Formation

Master's degree in Engineering, Cybersecurity, or Information Systems Security

Outils

SOC/SIEM tools

PKI tooling

Vulnerability scanning tools

Description du poste

Oticon Medical in Vallauris, France, develops bone-anchored hearing systems within an international group. We seek an Information Security & Compliance Manager to define, deploy, and continuously improve measures that ensure the security, availability, integrity, and confidentiality of health data.

You will drive the organization’s cybersecurity strategy, risk management framework, and compliance roadmap, aligning ISMS with ISO 27001, GDPR, and health data hosting standards (HDS) where