Senior Cybersecurity Leader — AppSec, Cloud & Compliance

Constructor Tech; Paris; Hybride; EUR 110 000 - 150 000; Plein temps

Avantages offerts par ce poste

Work equipment

English classes

Flexible schedule

Newborn bonus

Patent remuneration

Paid leave

Remote work

Hybrid work

Résumé du poste

Constructor Tech in Paris is seeking a Head of Cybersecurity to lead our security function across application security, compliance, infrastructure and business applications. You’ll manage a small security team, set strategy, and work hands-on with engineering, IT and compliance.

The role focuses on building an AppSec program with CI/CD integration, owning ISO 27001 and SOC 2, securing Kubernetes and cloud environments, and safeguarding M365/CRM/ERP while guiding risk across the business.

Qualifications

• 8+ years in information security with leadership experience
• Experience running AppSec programs with CI/CD tooling
• Hands-on ISO27001 and SOC 2 audits
• Experience securing business applications and vendor risk

Responsabilités

• Build and run AppSec program with CI/CD integration
• Run developer security training and champion secure coding
• Evaluate AI coding tools for security impact
• Own ISO 27001 and SOC 2 certifications and audits
• Define security standards for infrastructure-as-code and networks
• Secure Microsoft 365, CRM and ERP across business apps
• Manage identity, access and data protection controls
• Oversee vendor risk for key SaaS partners

Connaissances

Leadership

AppSec

CI/CD tooling

ISO27001/SOC2

Cloud security

Vendor risk

Outils

Kubernetes

Cloud platforms

Description du poste

Constructor Tech in Paris is seeking a Head of Cybersecurity to lead our security function across application security, compliance, infrastructure and business applications. You’ll manage a small security team, set strategy, and work hands-on with engineering, IT and compliance.

The role focuses on building an AppSec program with CI/CD integration, owning ISO 27001 and SOC 2, securing Kubernetes and cloud environments, and safeguarding M365/CRM/ERP while guiding risk across the business.