Sovereign Cloud InfoSec Lead France

SAP SE; Levallois-Perret; Hybrid; EUR 90,000 - 130,000; Full time

Job summary

SAP Sovereign Cloud Delivery & Operations France is responsible for delivering SAP's sovereign cloud portfolio to French regulated industries, ensuring SecNumCloud qualification and ANSSI compliance. You will own the security controls and collaborate with auditors to maintain high regulatory standards.

The role sits at the intersection of security, compliance, and stakeholder management, requiring 5–7 years in information security and fluency in French.

Qualifications

• Secure cloud governance and SecNumCloud qualification knowledge required.
• Fluent French (written and spoken) for ANSSI exchanges and dossier handling.
• Experience with PASSI audit methodology and ANSSI evidence expectations desired.
• Knowledge of LPM, NIS2-FR, CNIL/RGPD in relation to SecNumCloud obligations.

Responsibilities

• Own the SecNumCloud qualification lifecycle: control implementation, evidence collection, PASSI audit coordination, and ANSSI dossier management.
• Act as primary interface with ANSSI and PASSI-accredited auditors for qualification and surveillance activities.
• Ensure France-specific security controls are implemented and maintained by operations.
• Translate SAP security policies into France-compliant controls and report to the Regional Information Security Officer.
• Lead risk assessments and treatment plans under SecNumCloud and French regulatory frameworks.
• Drive vulnerability management with security engineers and implement tooling.
• Develop and maintain all qualification and regulatory audit documentation in French where required.
• Monitor ANSSI directives and translate changes into actionable controls.

Skills

SecNumCloud mastery

French language proficiency

ANSSI process familiarity

French regulatory knowledge

Security clearance eligibility

5-7 years in information security

Multi-framework audit experience

Education

Bachelor's degree in computer science or IT security

ISO 27001 Lead Auditor certification

Tools

HSM

Hypervisor isolation

Job description

SAP Sovereign Cloud Delivery & Operations France is responsible for delivering SAP's sovereign cloud portfolio to French regulated industries, ensuring SecNumCloud qualification and ANSSI compliance. You will own the security controls and collaborate with auditors to maintain high regulatory standards.

The role sits at the intersection of security, compliance, and stakeholder management, requiring 5–7 years in information security and fluency in French.