Head of Security

PlayPlay is the video creation platform that enables marketing and communication teams to turn any message into a memorable video. **Since 2017, PlayPlay has been growing exponentially**: - 2500+ large and mid-sized companies across the globe (including two-thirds of the CAC40) - 230+ employees in Paris, New York and Berlin; - 65 M$ raised (series A and B); - Member of the French Tech 120 and recently ranked #26 in the Top100 rising B2B Scale-up in Europe by Sifted **PlayPlay is the company for you if you want to**: - Join a hyper-growth scale-up that allows you to invest in multiple projects and benefit from rapid evolution opportunities \uD83C\uDF31 - Work on a product loved by our customers (68+ NPS) and in constant improvement \uD83D\uDE80 - Learn from great colleagues in a positive work environment that thrives on ambition, drive, humility, transparency, and teamwork (our 4.6/5 rating on Glassdoor is proof of that) \uD83E\uDD17 - Enjoy activities organized by the Happiness team (Music Quizzes, concerts, seminars, etc.) \uD83C\uDF89 - Work in a hybrid model remote/office and have additional four weeks of full-remote per year (overseas is allowed in any country with a time difference of 3 hours or less) \uD83D\uDDA5️ We are backed by investors such as Insight Partners (HubSpot, Twitter), Balderton (Revolut, Aircall) and Point9 (Loom, Zendesk) who are helping us become the global leader in video creation. And to achieve this, we are looking for the best talent in the market **Read more about "The 100 good reasons to join PlayPlay"**: At PlayPlay, we empower teams to create powerful story telling via video at scale. Operating in a B2B environment with enterprise clients who demand the highest security standards, we handle sensitive brand assets and data that require enterprise-grade protection. We're seeking a security-first leader to elevate our security posture while managing our infrastructure foundation. Reporting to the CTO, you'll lead our Security and Infrastructure teams (4-5 engineers), with a primary focus on building a world-class security organization. You'll be responsible for our overall security strategy, governance framework, and risk management program while ensuring our infrastructure supports these security requirements. **Your Role: Impact, Ownership, Innovation** As Head of Security and Infrastructure, you will: **Security Leadership - 70% of focus** **Security Strategy & Governance** - Maintain and improve our comprehensive security governance framework aligned with industry standards such as the ISO 27001 - Develop and maintain security policies, standards, and procedures - Lead security awareness and training programs across the organization - Drive the security certification roadmap - SOC 2, ISO 27001 - Define and track security metrics and KPIs **Risk Management & Compliance** - Maintain an enterprise-wide security risk management framework - Lead threat modeling and risk assessments for new features and architectures - Ensure compliance with data protection regulations (GDPR, CCPA) and participate to Data Privacy group - Partner with Legal on security and privacy compliance matters **Security Operations & Monitoring** - Design and implement a Security monitoring strategy - Establish security detection rules and alerting - Oversee vulnerability management and bug bounty programs - Lead security incident response **Security Business Partner** - Lead security discussions with enterprise clients including security aspects of client contracts and security questionnaires - Build relationships with client security teams **Infrastructure Leadership - 30% of focus** **Cloud & Infrastructure** - Leverage DevOps expertise to design a secure cloud infrastructure following zero-trust principles - Implement infrastructure security controls and monitoring - Oversee identity and access management (IAM) strategy **Infrastructure Operations** - Guide infrastructure automation and IaC practices - Oversee disaster recovery and business continuity planning - Optimize infrastructure costs while maintaining security requirements **Senior Technical leadership** - **Lead, mentor, and support** growth of your engineers - **Shape the Roadmap**: Collaborate with Tech Leads to design, propose, and execute an 18-month strategic roadmaps for security and infrastructure initiatives - **Collaborate** with other engineering leaders to align infrastructure capabilities with product needs - **Bugdet**: Own the infrastructure and security budgets, making strategic decisions about tooling and resources - **Nurture a Positive Environment**: Build a cohesive, collaborative, and positive team culture where everyone feels valued, supported, and empowered to excel. **What We’re Looking For**: - 5+ years of experience in security and infrastructure engineering including 2+ years of engineering management - Security - Solid knowledge of Security frameworks (ISO 27001,, EBIOS-RM), Risk management method