Chief Information Security Officer (CISO)

Remanence; Paris (TX); Hybrid; USD 180,000 - 280,000; Full time

Benefits offered by this job

Visa sponsorship and relocation

Hybrid setup

Job summary

Remanence is building the next era of enterprise AI with security and compliance at the core. You will own security and compliance across the company and product, serving customers in regulated industries who deploy on their own infrastructure.

This hands-on role centers on practical security programs and end-to-end audits. We seek a leader who can drive ISO 27001 and SOC 2 Type II, manage GDPR/EU AI Act considerations, and collaborate with Platform and Infrastructure to secure development and

Qualifications

• Leads security programs and audits end-to-end.
• Experience with ISO 27001 and SOC 2 Type II.
• Familiarity with GDPR and AI Act is a plus.

Responsibilities

• Build and own the security program across company and product.
• Lead ISO 27001 certification and SOC 2 Type II audits.
• Coordinate with Platform/Infrastructure on secure development.

Skills

ISO 27001

SOC 2

Cloud security

Kubernetes

Risk communication

Tools

Vanta

Drata

SIEM

Job description

Chief Information Security Officer (CISO)

Remanence is pioneering the next era of enterprise AI by building intelligent systems that learn continuously from real-world execution. We transform complex enterprise workflows and business context into dynamic, interactive environments where AI agents can safely learn, adapt, and improve. By combining high-fidelity simulation environments with state-of-the-art training loops, we build specialized models that solve long-horizon, complex tasks with unmatched reliability. We're building the most talent-dense AI team in Europe to make this happen.

You'll own security and compliance across the company and the product. Our customers operate in regulated industries, often deploying on their own infrastructure. Your job is to build a practical security program, earn the certifications they expect, and help them deploy Remanence with confidence. This is a hands-on role.

What you'll work on

• Build our security program and lead ISO 27001 certification and SOC 2 Type II audits, expanding to additional frameworks as needed.

• Manage compliance requirements, including GDPR and the EU AI Act, alongside sector-specific customer expectations.

• Work with Platform and Infrastructure teams on secure development, deployment architectures, vulnerability management and penetration testing.

• Protect customer data, model weights and training trajectories through isolation, encryption and access controls. Address AI-specific risks such as prompt injection and data leakage.

• Lead customer security reviews, questionnaires and audits, helping unblock enterprise deployments.

• Own incident response and business continuity, and occasionally support internal IT security, including identity, device management and employee access.

Relevant frameworks and technologies

• Core certifications: ISO 27001 and SOC 2 Type II. You must have led at least one certification or audit end to end.

• Additional frameworks: Experience with AI, privacy or sector-specific standards such as ISO 42001, ISO 27701, SecNumCloud or HDS is a plus.

• Regulation: Familiarity with GDPR and the EU AI Act, alongside requirements relevant to regulated customers, such as DORA and NIS2.

• Security tooling: Compliance automation and monitoring tools such as Vanta, Drata and SIEM platforms.

• Infrastructure and IT: Kubernetes and cloud security, secrets and key management, identity providers and device management.

About you

You've built security programs at growing software companies and led at least one ISO 27001 certification or SOC 2 audit end to end.
You're comfortable reviewing cloud infrastructure, Kubernetes deployments and infrastructure-as-code. You can turn security requirements into practical engineering controls and explain risk clearly to engineers, customer security teams and procurement.
We welcome experienced security leaders and hands-on engineers ready to step up. Experience with regulated customers, on-prem or BYOC deployments, and compliance automation tools such as Vanta or Drata is valuable.

What we offer

• Competitive compensation and equity.

• A fast-paced environment combining frontier research with impactful real-world applications.

• Visa sponsorship and relocation support for candidates joining us in Paris or London.

• A flexible hybrid setup, with a preference for working together in person.