CISO — Chief Information Security Officer (Permanent / CDI)

Version française

Permanent employment contract (CDI) · Central Paris, France · Hybrid working
Gross annual compensation package: €170,000, including base salary and variable pay.

Why this role:

A broad role with substantial autonomy: you will set priorities, define the security roadmap and contribute directly to delivery, working closely with technical teams and colleagues responsible for compliance.

Our client:

OD Consulting is recruiting a CISO for a technology company operating in an international environment. You will take ownership of application, infrastructure and data security, combining hands-on expertise with clear processes and support for engineering teams.

Responsibilities:

• Define and lead the cybersecurity roadmap.
• Strengthen application, infrastructure and cloud security.
• Establish effective identity, access and permissions management.
• Organize vulnerability detection, assessment and remediation.
• Embed security controls into development and deployment pipelines.
• Oversee security testing and expand automation.
• Develop detection and incident response capabilities.
• Help teams adopt secure working practices.
• Support certification and compliance programmes through policies, controls, documentation and audit preparation.
• Respond to customer and partner security assessments in collaboration with relevant teams.

Essential skills:

• At least five years of experience in security engineering.
• Strong understanding of application, network and cloud security.
• Experience with audits, vulnerability management and security frameworks such as ISO 27001 or SOC 2.
• Knowledge of CI/CD security controls, including SAST, DAST, dependency and container image scanning.
• Practical experience with automated security testing tools, including AI-assisted testing.
• Ability to work autonomously, prioritize risks and define your own roadmap.
• Professional fluency in English.

Technical environment:

Public cloud, Infrastructure as Code, containers, continuous integration and deployment, observability, identity management and modern web applications.

Additional strengths:

Experience in environments with demanding security and compliance requirements would be an advantage.

How you work:

You combine technical rigour with a pragmatic approach. You can explain risks, recommend proportionate measures and help teams implement them. Curiosity, clear communication and ownership are essential.

Our cybersecurity recruitment expertise (in French)