Information Security Officer

**Powering our sustainable future together**

Mobility has given us freedom. Opportunity. Growth. It has defined our world. But it has come at a price. To create a sustainable future, we must transition away from fossil fuels; and embracing electric mobility is key to making this happen. That's why, over a decade ago, EVBox was founded to empower the EV revolution.

Today, that revolution is unstoppable. We’ve now entered the new era of mobility: one where electric vehicle has shifted from a niche technology to an agent of change in society. A disruptive force, no longer for the few, but for the many. It's time to take it mainstream.

In this new era, we must lay the foundations of an electric mobility network that's fit for mass electric vehicle adoption. That's why we are leading the charge with a complete ecosystem of solutions for forward-thinking businesses and drivers. To build a world where electric mobility is the new normal.

To get there, we need people from all walks of life who share our passion for creating a sustainable future. Join us to empower the global shift to electric mobility with our all-in-one EV charging solutions.

**About the role**

We are looking for an experienced **Information Security Officer** (ISO) to join our IT department at our headquarters in Bordeaux. This strategic role will focus on redefining our security landscape by improving internal security policies, ensuring compliance with industry standards, and strengthening the organization’s overall security posture.

**Role and responsibilities**:
**ISMS Execution**
- Develop & improve controls and processes internally
- Monitor the effectiveness of control operation and review your teammates’ controls.
- Build reports on findings and inform management/stakeholders
- Conduct Risk Assessments and collaborate with stakeholders
- Raise / manage non-conformities and risk treatment plans and follow up the actions.
- Be clear about the risks and conclusion of them and support your teammates for that perspective and goal
- Perform periodic user access reviews
- Promote and provide cyber-awareness and organize education, training and information where necessary
- Translate security policies into security requirements for new and existing projects
- Design and review IT related policies and procedures.
- Coordinate the development and execution of internal and external audit plans
- Manage and perform ad-hoc security assessments as required by the management

**Incident & Crisis Management**
- Execute the incident management process for P1 incidents
- Use monitoring, detection, incident response and automation to proactively support ongoing security operations
- Facilitate Post-Mortems and develop lessons learned
- Manage problems to resolution

**Business Support**
- Complete RFP questions
- Support implementation of new vendors
- Support and challenge business lines and your teammates
- Provide risk advise on relevant process
- Work closely with senior-level management in developing recommendations for organizations' business owners/IT department and conduct meetings on their control environment.

**Other security activities**
- Provide security support to other IT/technology functions if/when needed
- Facilitate communication between technical and non-technical teams

**Profile**

Language Proficiency: Fluent in French and English, with excellent professional communication skills, both verbal and written.

Composure: Maintains a calm and composed attitude in high-pressure situations (e.g., incident management).

Ownership: Demonstrates the ability to take full responsibility for areas within your scope of accountability.

**Technical Skills/Experience**

ISO 27001 Expertise: Proven experience with ISO 27001 standards.

ISO 22301 Expertise: Demonstrated experience with ISO 22301 frameworks.

Risk Management Frameworks: Proven experience with risk management frameworks such as ISO 31010 or COSO.

Cloud Security: Hands-on experience with cloud environment security.

Disaster Recovery Testing: Experience in conducting disaster recovery tests.

Certifications: ISO 27001 Lead Auditor/Lead Implementor, CISM, or CISA certification.

Scaling Environments: Experience in scaling environments and managing associated challenges.

**Job Types**: Full-time, Permanent
Status: Cadre

Pay: From 40,000.00€ per year

Ability to commute/relocate:

- 33850 Léognan: Reliably commute or planning to relocate before starting work (preferred)

Work Location: Hybrid remote in 33850 Léognan