IT & Security Lead (RSSI)

IT & Security Lead (RSSI)

Paris, France | Full-time (CDI) | Hybrid

Est-ce votre prochain emploi ? Lisez la description complète ci-dessous pour le savoir, et n'hésitez pas à envoyer votre candidature.

At Dolead, we align marketing, sales, and data to turn media investment into real business results. We launch paid campaigns faster, connect customer data with confidence, and deliver sales-ready leads at a fixed cost per lead.

We already support 200+ clients across 15 countries, with a team of 70+ experts from 13 nationalities across Europe and North America.

Our teams move fast. New tools, AI platforms, and automation are part of how we work every day. But moving fast also means making sure our systems, access, and data are properly secured.

That’s where you come in.

We’re looking for our first IT & Security Lead (RSSI) to build a practical, reliable security framework across Dolead.

This is a role with genuine ownership: defining the right rules, putting them into practice, and making sure they work for the people using them.

You’ll collaborate closely with Engineering, HR, Legal, Operations, and our business teams across France and the US, alongside our external IT partner.

Your missions

1. Build our security foundations

• Define and implement practical security policies covering data sharing, password management, device usage, access controls, and business continuity.
• Structure security governance, maintain a risk assessment and prioritize improvements based on their actual business impact.
• Establish clear guidelines for AI tools and third-party applications, balancing innovation with data protection.
• Assess security risks associated with new vendors, tools, and services.

2. Secure our tools and critical accounts

• Own access governance across our SaaS environment, including Google Workspace, Slack, Notion, ClickUp, and other platforms.
• Strengthen identity and access management through SSO, MFA, privileged access controls, and regular access reviews.
• Secure business-critical advertising accounts, including Meta, Google Ads, TikTok, and other platforms, in collaboration with our media teams.
• Build reliable onboarding and offboarding processes with HR to ensure access is properly granted, reviewed, and revoked.

3. Identify risks and improve security controls

• Detect and reduce security exposure, from unauthorized applications to misconfigured sharing permissions and third-party integrations.
• Improve security monitoring, identifying relevant logs, alerts, and recurring checks.
• Coordinate vulnerability assessments, remediation plans, and external security testing where appropriate.
• Support incident reviews and turn findings into concrete improvements.

4. Work hands-on with Engineering and IT partners

• Collaborate with DevOps on cloud security, secrets management, infrastructure configurations, and secure development practices.
• Automate recurring security checks through scripts and lightweight tools.
• Coordinate with our external IT provider to maintain appropriate endpoint and device security standards.
• Translate technical risks into actionable priorities, without introducing unnecessary complexity.

5. Make security part of how we work

• Build security awareness across teams through practical guidelines, training, and ongoing support.
• Drive adoption of security processes, making sure policies are understood and consistently applied.
• Partner with Legal on GDPR and relevant US privacy requirements, including data protection and consent-related topics.
• Support client security assessments and help structure our readiness for frameworks such as ISO 27001 or SOC 2.

What you’ll focus on first

Your initial priorities will be to:

• Map our tools, critical accounts, existing controls, and main security risks.
• Strengthen access management, particularly onboarding, offboarding, and privileged accounts.
• Establish practical policies for data sharing and AI tools.
• Build a prioritized security action plan with clear owners and follow-up.

The objective isn’t to introduce complexity for its own sake. It’s to create security foundations that can grow with the business.

Your profile

We’re looking for someone who combines security expertise, technical understanding, and a pragmatic mindset.

• Solid experience in IT security or security governance, with a track record of building, owning, and improving security processes.
• Strong SaaS and identity security knowledge, including SS