Job offer : Operational CISO (M/F)

Actual Talent, Talent Acquisition Partner of the Actual group, the 5th largest player in the French employment market, is supporting its client, a major player specializing in investment real estate and asset management.

With over 300 employees today, our client operates in a highly regulated context (entities subject to the AMF and ACPR, crowdfunding activities, and management companies). To streamline an ecosystem resulting from various acquisitions and to bring the cyber strategy to its highest level, the group is creating the position of Group CISO.

The Position and your missions

Positioned as a unique function (solo CISO without an internal dedicated team), you benefit from a dual strategic reporting line: hierarchically to the Deputy General Management and functionally to the CIO, thus guaranteeing your total independence.

This position is fundamentally techno-functional. A true conductor, you are capable of defining the global strategic vision, but you will not hesitate to "get your hands dirty" on a daily basis. Your missions are structured around 4 pillars:

• Governance and Strategy (35%): Creation of the documentation corpus from A to Z (ISSP, BCP/DRP), committee management, and steering an ambitious roadmap aiming for ISO 27001 certification within 2 to 3 years.

• Compliance and Regulation (30%): Full steering of the compliance program for the European DORA regulation for 5 regulated entities, management of third-party risks (register of critical ICT providers), and interface with supervisory authorities (AMF/ACPR).

• Security Run, Technical Operations, and Steering (25%): This is where your technical dimension is crucial. Far from purely theoretical governance, you actively participate in operations by challenging, operating, and steering your external providers (including the MSSP acting as a mini-SOC). You analyze pentest reports, handle alerts, and work in direct contact with the small internal infrastructure team on remediation and vulnerability management.

• Evangelization and Awareness (10%): Deployment of an IT security culture through strong pedagogy with business teams and management.

The profile sought

• With a higher education degree (Master's level), you have 5 to 8 years of experience in cyber steering functions (CISO, Deputy CISO, or cybersecurity consultant assuming strong field leadership).

• Background sector: You have ideally evolved within the financial, banking, regulated real estate sector, or in an industrial environment subject to strong regulatory constraints.

• Mindset (The absolute prerequisite): We are not looking for a profile focused solely on "macro" or high-level governance. You have an entrepreneurial spirit, strong autonomy, a solid technical base, and a real desire to get involved in the operational "Run" of the company.

• Possession of a recognized certification (CISSP, CISM, ISO 27001) is a real asset for this position.

Conditions and Benefits

• Contract type: CDI only

• Location: Paris.

• Remote work: 1 day of remote work per week.

• Remuneration: fixed + variable part + profit-sharing & incentives.

Recruitment process: At Actual Talent, we guarantee a transparent and fast process: a first exchange with me, followed by a cross-interview with the CIO/HR at our client's office, then a final meeting with the Group's General Management.

Ready to build the digital resilience of a group in full transformation with a very concrete approach? Apply now!