
CISO — Chief Information Security Officer (Permanent / CDI)
Permanent employment contract (CDI) · Central Paris, France · Hybrid working
Gross annual compensation package: €170,000, including base salary and variable pay.
Why this role:
A broad role with substantial autonomy: you will set priorities, define the security roadmap and contribute directly to delivery, working closely with technical teams and colleagues responsible for compliance.
Our client:
OD Consulting is recruiting a CISO for a technology company operating in an international environment. You will take ownership of application, infrastructure and data security, combining hands-on expertise with clear processes and support for engineering teams.
Responsibilities:
- Define and lead the cybersecurity roadmap.
- Strengthen application, infrastructure and cloud security.
- Establish effective identity, access and permissions management.
- Organize vulnerability detection, assessment and remediation.
- Embed security controls into development and deployment pipelines.
- Oversee security testing and expand automation.
- Develop detection and incident response capabilities.
- Help teams adopt secure working practices.
- Support certification and compliance programmes through policies, controls, documentation and audit preparation.
- Respond to customer and partner security assessments in collaboration with relevant teams.
Essential skills:
- At least five years of experience in security engineering.
- Strong understanding of application, network and cloud security.
- Experience with audits, vulnerability management and security frameworks such as ISO 27001 or SOC 2.
- Knowledge of CI/CD security controls, including SAST, DAST, dependency and container image scanning.
- Practical experience with automated security testing tools, including AI-assisted testing.
- Ability to work autonomously, prioritize risks and define your own roadmap.
- Professional fluency in English.
Technical environment:
Public cloud, Infrastructure as Code, containers, continuous integration and deployment, observability, identity management and modern web applications.
Additional strengths:
Experience in environments with demanding security and compliance requirements would be an advantage.
How you work:
You combine technical rigour with a pragmatic approach. You can explain risks, recommend proportionate measures and help teams implement them. Curiosity, clear communication and ownership are essential.
Our cybersecurity recruitment expertise (in French)

