Head of Cyber Defense Center

Led by Rodolphe Saadé, the CMA CGM Group, a global leader in shipping and logistics, serves more than 420 ports around the world on five continents. With its subsidiary CEVA Logistics, a world leader in logistics, and its air freight division CMA CGM AIR CARGO, the CMA CGM Group is continually innovating to offer its customers a complete and increasingly efficient range of new shipping, land, air and logistics solutions.
Committed to the energy transition in shipping, and a pioneer in the use of alternative fuels, the CMA CGM Group has set a target to become Net Zero Carbon by 2050.
Through the CMA CGM Foundation, the Group acts in humanitarian crises that require an emergency response by mobilizing the Group’s shipping and logistics expertise to bring humanitarian supplies around the world.
Present in 160 countries through its network of more than 400 offices and 750 warehouses, the Group employs more than 155,000 people worldwide, including 4,000 in Marseilles where its head office is located.
YOUR ROLE
The Head of Cyber Defense Center leads key cybersecurity functions, including Cyber Threat Intelligence, Vulnerability Management, Security Operations Center (SOC), and Incident Response. This role ensures that the organization can detect, assess, and respond to cyber threats, minimizing risks, improving security posture and increasing the overall business operational resilience. The Head of Cyber Defense Center report to the Group CISO.
WHAT ARE YOU GOING TO DO
**Leadership**:

- Lead Cyber Defense Center Service Line with high level of integrity and quality of service.
- Lead, advise on and implement CDC strategy, processes and capabilities roadmap while ensuring the alignment of the CDC Mission and Vision with the CISO vision & strategy, to the business ecosystem and its continuous evolution.
- Build and maintain an efficiently functional and collaborative CDC model with the appropriate interfaces, processes and workflows between SOC, incident response, vulnerability management, and threat intelligence functions.
- Be the focal point of contact of senior leadership concerning cybersecurity incidents.
- Advise on CDC build and continuous improvement with reliance on industry best practices.
- Lead automation strategy and CDC enablement with tech and AI capabilities where beneficial.
- Lead and advise on CDC strategy in relevance with the industry’s threat landscape and actors.
- Regularly direct and coordinate with the Managers of SOC, CTI, IR and Vulnerability Management to ensure cohesive operations.
- Provide leadership, mentorship, and performance management for SOC personnel, fostering professional growth and skills development.
- Interact with others Cybersecurity, IT and Business teams.

**SOC Management Oversight**:

- Provide strategic guidance to the SOC Manager.
- Ensure efficient operations of the SOC and adherence to SOC SLAs.
- Ensure effective monitoring, detection, and response to security incidents.
- Oversee use cases libraries and detection capabilities in IT/OT environments.
- Guide and support the SOC Manager in achieving operational excellence.
- Perform executive reporting of SOC KPIs, metrics and reports.
**Cyber Threat Intelligence (CTI) Oversight**:

- Provide strategic guidance to CTI Manager in gathering, analyzing, and disseminating threat intelligence.
- Lead the cyber threat intelligence capabilities through proactive approach to gather, vet, analyze, disseminate and act on threat intelligence to anticipate and detect potential threats.
- Build partnerships with external intelligence-sharing stakeholders for improved threat detection.
- Ensure integration of threat intelligence into SOC operations and incident response.
- Develop strategies to anticipate and mitigate emerging threats.
- Perform executive reporting of CTI KPIs, metrics and reports.
**Vulnerability Management Oversight**:

- Oversee the Vulnerability Management Manager in identifying, assessing, and remediating vulnerabilities.
- Ensure regular vulnerability scans are conducted through the service line.
- Oversee and enforce policies for vulnerability management.
- Foster cross-functional collaboration to remediate security weaknesses.
- Perform executive reporting of Vulnerability Management KPIs, metrics and reports.
**Incident Response Oversight**:

- Provide strategic guidance to Incident Response Manager.
- Oversee and empower incident response plans build, review, updates and improvements.
- Oversee and empower IR teams in investigating and resolving security incidents quickly and effectively.
- Foster post-mortem lessons learned culture throughout the service line and the company.
- Perform executive reporting of incidents, IR KPIs, metrics and reports.
**CDC Governance, Workflows and Processes**:

- Develop and enforce CDC workflows and procedures.
- Ensure compliance with company requirements, external regulations and standards where applicable.
- Regularly review and update CDC operational mode