Security Project Manager — Steering and closing of Privacy recommendations

Keoni; Paris; Hybrid; EUR 90,000 - 130,000; Full time

Job summary

Keoni seeks a Project Director to lead a cross-functional initiative spanning Security, Privacy, Legal, Risk, Compliance, Business, and IT in France. You will prioritise GDPR-related recommendations, define a practical roadmap, and drive end-to-end delivery from scoping to closure with timely evidence and deliverables before year-end.

The role requires 9+ years in complex security or data protection programs, strong governance and stakeholder engagement, and the ability to translate regulatory

Qualifications

• At least 9 years of experience leading complex security, cybersecurity, compliance, or data protection projects.
• Proven experience managing cross-functional programs with operational and decision-making stakeholders.
• Hands-on experience processing and closing recommendations from audits, controls, risk analyses, or compliance authorities.
• Sound understanding of GDPR, Privacy by Design, data governance, and associated security requirements.
• Advanced degree in a related field and project management or security certification is a plus.

Responsibilities

• Portfolio management: consolidate recommendations, assess criticality, define priorities, build a roadmap.
• End-to-end project management: scope, plan, execute, deploy, and close projects.
• Remediation plans: analyze gaps, actions, dependencies, and monitor implementation.
• Deliverable production: create closure documents, risk analyses, action plans, reports, and decision materials.
• Cross-functional coordination: lead Security, Privacy, Legal, Compliance, Risk, Business, and IT teams.
• Commitment management: manage deadlines, budgets, resources, risks, and quality levels.

Skills

Cross-functional leadership

Governance & reporting

Project management

Stakeholder engagement

Regulatory compliance (GDPR)

Risk management

Change management

French writing proficiency

English proficiency (asset)

Education

Advanced degree in computer science / cybersecurity / project management / digital law

Tools

PMP

PRINCE2

ISO 27001

CISM

CISSP

Job description

Context and Challenges: Given the large backlog of recommendations related to personal data protection, a dedicated task force has been established to expedite their processing, secure remediation plans, and ensure their timely completion. The Project Director will act as the central point of coordination between the Security, Privacy, Legal, Risk, Compliance, Business, and IT teams. They will be responsible for prioritizing the most critical recommendations, addressing any roadblocks, and guaranteeing the production of necessary evidence and deliverables before the end of the year.Mission Objectives • Significantly reduce the backlog of open Privacy recommendations. • Secure the closure process, deadlines, and responsibilities. • Guarantee the quality, traceability, and acceptability of evidence. • Implement governance and reporting mechanisms that enable rapid decision-making.Main Responsibilities • Portfolio Management: consolidate recommendations, assess their criticality, define priorities, and build a realistic roadmap. • End-to-End Project Management: ensure the scoping, planning, execution, deployment, and closure of assigned projects. • Remediation Plans: analyze gaps, formalize corrective actions, identify dependencies, and monitor their implementation. • Deliverable Production: draft or commission the production of closure documents, procedures, risk analyses, action plans, reports, and decision-making materials. • Cross-Functional Coordination: organize and lead the Security, Privacy, Legal, Compliance, Risk, Business, and IT teams. • Commitment Management: manage deadlines, budgets, resources, risks, alerts, deliverables, and quality levels. • Stakeholder Engagement: verify the robustness of proposed solutions and obtain clear commitments on expected actions. • Governance and reporting: prepare and lead project and steering committees, produce reliable indicators, and facilitate decision-making. • Change management: support the adoption of new requirements, processes, and controls by the teams involved.Required Profile • At least 9 years of experience leading complex security, cybersecurity, compliance, or data protection projects. • Proven experience managing cross-functional programs involving operational and decision-making stakeholders. • Hands-on experience processing and closing recommendations from audits, controls, risk analyses, or compliance authorities. • Sound understanding of the GDPR, Privacy by Design principles, data governance, and associated security requirements. • Advanced degree in computer science, cybersecurity, project management, digital law, or a related field. • Project management or security certification is an asset: PMP, PRINCE2, Agile, ISO 27001, CISM, CISSP, or equivalent.Technical and Functional Skills • Proficiency in project management methodologies, planning, budget monitoring, and risk management. • Ability to translate regulatory and business requirements into functional and technical specifications and operational controls. • Knowledge of privacy governance frameworks, data protection impact assessments, and data breach management. • Proficiency in audit and remediation processes: qualifying discrepancies, defining evidence, monitoring actions, and preparing for final validation. • Ability to develop dashboards, performance indicators, and executive committee materials. • Excellent written communication skills in French; professional English proficiency is an asset in an international environment.Behavioral Skills • Leadership, autonomy, and strong coaching abilities. • Rigor, organizational skills, and results orientation. • Analytical and synthesis skills, with the ability to handle complex issues. • Excellent communication, negotiation, and arbitration skills. • Advisory approach, diplomacy, and the ability to challenge pragmatically. • Resilience under pressure and the ability to manage multiple priorities simultaneously.Expected deliverables : • Mapping and prioritization of the recommendations portfolio. • Consolidated roadmap and detailed action plans. • Register of risks, dependencies, decisions, and roadblocks. • Progress dashboards and support materials for governance committees. • Evidence files and formal closure requests. • Mission report and recommendations for ensuring the sustainability of the program.Success criteria : • Adherence to milestones and the closure schedule. • Measurable reduction in the number of open and overdue recommendations. • Quality and completeness of submitted evidence. • Reduction of residual risks and absence of reopening due to incomplete files. • Sponsor satisfaction and smooth coordination between stakeholders.Application: CV + cover letter + copies of diplomas to be sent to [e-mail]