DESCRIPTION :
We are currently seeking a Head of Cyber Security Program Governance, reporting directly to Chief Information Security Officer to join our Cybersecurity Leadership team based in Paris, France, as a primary location. The role can also be based in Rome, Italy or Barcelona, Spain.
The Cyber Security department at Technip Energies serves as the internal center of excellence, responsible for defining, implementing, and enforcing security across the entire enterprise, covering both IT and critical Operational Technology (OT) environments across our global footprint. We manage the entire cyber security lifecycle, including Cyber Risk Management, Compliance and Assurance, Cyber Security Architecture and Engineering, Security Operations, Cyber Awareness , as well as play an active role in delivering solutions to our customers.
Cyber Security is a top-of-agenda priority for our Executive Committee (ExCom), fueling an aggressive, fully supported journey toward security excellence. We are innovators who leverage the most advanced technologies in detection, protection, and response, and we are rapidly integrating Artificial Intelligence (AI) into our operations. If you are driven by innovation and aspire to secure a highly dynamic, global organization, this is where you belong.
Cyber Security Program Governance, part of the cyber security department, is a central strategic pillar which is responsible for defining, structuring, and overseeing the comprehensive Cyber Security Program support its execution and monitor its effectiveness. In addition, it is responsible for the Cyber Security Policy Governance, Cyber Security Compliance and Assurance.
About the role:
Cyber security Program definition and governance
* Support the CISO in developing and maintaining a comprehensive, organization-wide information security program aligned with evolving threat landscapes, business goals, and regulatory requirements.
* Monitor the financial aspect of the information security program measuring its efficiency (risk reduction versus costs) and manage the entire budget of security functions.
* Own the Information and Cyber Security Policy and Standard Framework. Define information security policies, standards, guidelines and procedures ensuring they are embedded into all business processes from the outset.
* Support internal stakeholders (First Line of Defense) in the design and implementation of security controls on their assets, ensuring they are scalable, effective, and adaptable to changing risks.
* The main interface of the Information Security team is the PGP (Performance, Governance, Process) for the coordination and monitoring of the security initiatives. team
Monitoring, reporting, and continuous improvement
* Monitor the execution of the security program and its effectiveness and regularly report its status
* Establish and track KPIs and KRIs to evaluate the effectiveness of security controls and the organization's overall risk posture.
* Provide regular, transparent reports to the CISO and executive leadership and stakeholders on security metrics, incident trends, and compliance status.
Cyber Security Policy Governance
* Be responsible for the cyber security policy framework and governance
Certification, compliance and assurance
* Manage certification processes (e.g., ISO 27001 etc.) to verify the level of compliance and enhance security maturity.
* Collaborate with other internal information security, legal and compliance and projects teams to gather security requirements and integrate them into the corporate Information Security Management System (ISMS).
* Monitor and verify the implementation of security controls, ensuring ongoing compliance with regulatory standards and internal policies.
* Be the main interface of the Information Security department with Internal Control. Conduct internal audits and compliance assessments to ensure continuous improvement and adherence to security policies.
Stakeholder Engagement
* Act as a liaison between Digiteam, other business units to promote security initiatives and foster collaboration.
* Stay informed on emerging threats, regulatory changes, and technological advancements to proactively adapt the security program.
Team Management
* Manage hierarchically a team of at least 6 people, based in different operating centers internationally - Subject Matter Experts of Cyber Security and Managers, taking responsibility for their performance evaluation, career development, etc.
Code d'emploi : Surveillant Chef (h/f)
Domaine professionnel actuel : Chefs des Services de Police, des Pompiers et de la Sécurité
Niveau de formation : Bac+3
Temps partiel / Temps plein : Plein temps
Type de contrat : Contrat à durée indéterminée (CDI)
Compétences : Intelligence Artificielle, Cloud Computing, Sécurité Informatique, Professionnel de l'Architecture de Sécurité des Systèmes d'Information, Système de Gestion de la Sécurité de l'Information, Cyber Threat Analysis, Technologies Informatiques, Système d'Opérations, Anglais, Adaptabilité, Sens de la Communication, Persévérance, Sens de l'Inclusion, Leadership, Sens des Responsabilités, Attitude Professionnelle, Sens de la Stratégie, Honnêteté, Motivation Personnelle, Curiosité, Innovation, Architecture, Réalisation d'Audits, Contrôles et Audits Internes, Processus d'Affaires, Amélioration des Processus d'Affaires, Conformité Réglementaire, Contrôles de Sécurité, Traitement des Incidents, Gestion de la Performance, Secteur Financier, Gouvernance, ISO/IEC 27001, Aménagement Paysager, Négociation, Gouvernance Politique, Gestion de Programme, Exigences Réglementaires, Analyse de Risques, Politiques de Sécurité, Analyse des Besoins de Sécurité, Engagement des Parties Prenantes, Gestion des Parties Prenantes, Réduction des Risques, Réalisation d'Évaluations, Métrique, Institut National des Normes et de la Technologie (NIST), Coaching, Management d'Équipe, Politiques Organisationnelles, Applications des Règles et Consignes de Sécurité, Gestion des Risques, Gestion du Feedback
Courriel :
contact-til@technip.com
Téléphone :
0472152140
Type d'annonceur : Employeur direct