Head of Ciso Office

**Missions et responsabilités**
Within the Group Digital & IT unit, Group CISO Office team is in charge of managing and coordinating the Regional / Business CISO of Saint-Gobain Group, securing the regions / business projects and securing Saint-Gobain Acquisition & Divestiture.

The Head of CISO Office will be leading the **CISO Office team**.

As Head of CISO Office, you will be reporting to Saint-Gobain Group CISO, you will be required to manage all Saint-Gobain business and regional CISO and make sure Group security requirement / policies are well followed and implemented correctly. You will also be responsible for securing Saint-Gobain Acquisitions & Divestitures. You will set targets, implement guidelines, and assist with any security topics / issues the CISO and Acq&Div teams may have.

**1) Saint-Gobain regions / business CISO management**:

- Manage the business regional CISOs
- Contribute to deployment of group security policies and ensure the compliance
- Assist CISO and CyberSoc teams during security incidents
- Build and lead a community around Cybersecurity (Security Expert Team)
- Follow regions / business Security KPI (Operational security KPIs)
- Steer the implementation of global and local security remediation and improvement plans
- Manage transversal Cybersecurity crisis and security incident at Group level (CISO Coordinator) with the different business / regional CISO concerned

**2) Acquisition and Divestiture**:

- Integrate and deploy Group Cybersecurity requirement in Acquisition and Divestiture projects
- Contribute to global Acquisition & Divestiture migration plans
- Define and build security frameworks and policies to secure future Acquisition & Divestiture
- Steer and follow overall Acquisition & Divestiture security topics (through Acq&Div dashboards)
- Ensure Cybersecurity incidents management on the perimeter and contribute to resolution on major incidents or crisis

**3) CISO support (Deliver security operation as a service)**:

- Provide risk analysis as a service to regions / business and cluster CISO (Coordinate internal experts and produce a risk analysis)
- Audit spot check on CISO activities (Risk analysis, flow validation, local controls, whitelisting,)
- Organize live cybersecurity events for CISO, business and IT users
- Raising the overall security level of stakeholders (CISO, IT teams,) through awareness and trainings

**4) Gather customer requirement to analysis (from Business and Regional CISO) and suggest standard Cybersecurity service offering (GDI Cybersecurity)**

**Profil recherché**
The Head of CISO Office shall fulfill the following objectives:

- Demonstrate responsibility for handling incidents
- Ensure the daily security level is maintained
- Make sure that delivered projects are secured
- Act as the security relay within his/her reporting scope
- Ensure IT recovery in the business continuity process
- Explain with clarity the security developments which must be done

You have a higher education with a **Master’s degree including a specialization in IT/Cybersecurity**.

You have a more than **10+ years of experience in the information system security field**.
- An **international **experience would be a plus
- One (or more) security certifications would be a plus

Technical skills:

- Good knowledge of the security fundamentals of IS (network, hosting, OS, middleware)
- Experience in vulnerability management (SCA, SAST, DAST, Pentest & Audit) and the afferent tools (vulnerability scanners, etc.)
- Good knowledge of risk analysis methodologies (EBIOS, etc.) and security into project
- Experience required in security support accompanying projects
- Good knowledge of endpoint security model of all main technologies (Windows, Mac, iOS, Android, etc.)

Personal skills:

- Leadership
- Teamwork (openness, relational)
- Structure, analysis and synthesis
- Good oral and written communication
- Fluent English
- Autonomy, source of proposals and initiative-taking

**Description additionnelle (contexte, évolution...)**
This position is based in Saint-Gobain Headquarters (La Défense, France). Regular business trips are expected.

**Qui sommes-nous ?**

Job Reference: FRA20581