Outsourced CISO 2

Keoni; France; Hybrid; EUR 120,000 - 180,000; Full time

Job summary

Kéoni Consulting seeks an outsourced CISO to guide information security governance across ISO 27001, NIS2 and GDPR compliance, aligning PART-IS and risk management with business objectives.

You will define IT security policy, supervise ISMS, lead incident response, and coordinate crisis exercises. The role requires at least 5 years as a CISO and experience with audits, training teams, and regulatory aspects.

Qualifications

• Expertise in ISO 27001, NIS1/NIS2, EBIOS RM and GDPR compliance.
• Experience in information systems management and information security governance.
• Ability to train and support change management initiatives.

Responsibilities

• Define and implement IT security policy and maintain operational condition.
• Supervise ISMS and risk analyses; manage governance of security controls.
• Coordinate incident response and crisis management exercises.
• Ensure GDPR compliance and multi-standard regulatory monitoring.

Skills

ISO 27001

NIS 2

EBIOS RM

Information Security Governance

GDPR compliance

Training & change management

Job description

# Outsourced CISO 2* Home* Outsourced CISO 2* May 29, 2026* 0 Comments* By Roberte OkoyaCONTEXT: In the context of an outsourced service, Mastering ISO 27001 and NIS 2: Supporting RSGS managers in achieving compliance with PART-IS and NIS2MISSIONS Information Security Governance: • Define and implement the IT security policy, and maintain it in operational condition. • Manage the ISMS (Information Security Management System) with the objective of approaching the ISO 27001 standard. • Supervise the application of NIS1/NIS2 and PART-IS. Risk Management: Conduct risk analyses (EBIOS RM). • Develop and monitor security action and assurance plans. • Implement security monitoring . • Promote and improve security. Regulatory and Legal Compliance : • Ensure GDPR compliance in conjunction with the DPO (DPO support and liaison if necessary). • Ensure multi-standard regulatory monitoring. Operational Security : • Supervise the implementation of technical security solutions (firewalls, SOC, antivirus, MFA, backups). • Manage security incidents in accordance with processes . • Coordinate incident response. • Lead corrective actions. Continuity and Resilience • Identify and assess information security risks and facilitate risk assessment within the risk analysis process . • Manage the Business Continuity Plan (BCP)/Disaster Recovery Plan (DRP). • Organize and lead crisis management exercises. • Implement specific information security processes in conjunction with the relevant department heads and management.Expected Skills: Technical Skills : Expertise in ISO 27001, NIS1/NIS2, EBIOS RM. Experience in information systems management and information security governance. Mastery of GDPR compliance and its organizational/technical aspects. Ability to integrate economic, environmental, social, ethical, and business continuity considerations into the information security strategy. Proven experience in information security audits (organizational, technical, regulatory). Ability to provide training and support for change management (Qualiopi-certified training organization ). • Management of legal and regulatory aspectsBehavioral skills • Active listening in hierarchical and functional relationships • Taking initiative and being proactive, having a sense of anticipation • Being curious • Being responsive and able to manage emergency situations (especially in the event of a cyberattack) • Being a good communicator (including regarding cyber risks and digital sobriety)Complementary skills: These additional skills are an extra asset for assessing the overall approach of the selected CISO and the organization.IT Skills • Collaboration on the IT strategic plan • Project management • Infrastructure architecture definition • Support team leadership • IT operations management • Budget management • Team leadership • Systemic vision: integrated approach • Training business and technical teams in cybersecurity. Certifications – ISO 27001 – EBIOS RM – NIS 2Experience: The ideal candidate will have at least 5 years of experience as a CISO. Additional experience as a CIO would also be appreciated.Application: CV + cover letter + copies of diplomas to be sent to [e-mail] in 2008, Kéoni Consulting is an IT consulting and engineering firm specializing in the banking, financial markets, insurance, and industrial sectors. We are the partner for major accounts in their digital transformation. We help them transform their business model, align their operational processes, select the best technologies, and mitigate and overcome the risks associated with digitalization. Kéoni Consulting helps companies to: Make a difference , innovate and create , reinvent their business, satisfy customers, gain a competitive advantage, become the leader in their sector, and become the leader in their sector. Our services cover the entire information systems lifecycle (Project Management, Business Analysis Consulting, Design, Implementation, Maintenance, Production, and Operations).**Job Category:** Digital Transformation**Job Type:** Full Time**Work location:** Europe