Information Security Manager

Role: Information Security Manager

Location: Paris, France

Type: Contract

Job Description:

Security Governance & Risk Management

• Lead and coordinate security risk assessments across applications, infrastructure, cloud services, third parties, and business initiatives.
• Ensure identified risks are appropriately documented, prioritized, tracked, and remediated or formally accepted.
• Promote alignment with organizational security policies, standards, regulatory requirements, and recognized security frameworks.
• Review and challenge security exceptions, compensating controls, and risk acceptance proposals.
• Support security audits, control assessments, and continuous security maturity initiatives.
• Establish effective processes for monitoring security risks, remediation activities, and outstanding actions.

Technical Security Leadership

• Provide security guidance across cloud, infrastructure, network, endpoint, identity, application, and data security.
• Review solution architectures and technical designs to identify security risks and recommend appropriate controls.
• Partner with engineering, architecture, and operations teams to address vulnerabilities, security gaps, misconfigurations, and technical weaknesses.
• Provide senior-level guidance on complex security issues and technology decisions.
• Evaluate security requirements alongside business priorities, cost, operational considerations, and delivery timelines.
• Promote practical and sustainable security solutions that can be effectively implemented across the organization.

Business Security Advisory

• Act as a trusted security advisor to business and technology stakeholders.
• Engage security early in major technology initiatives, transformation programs, and new solutions.
• Translate technical vulnerabilities, threats, and security risks into clear business impact and decision-ready recommendations.
• Communicate complex security topics effectively to both technical teams and senior leadership.
• Help the organization make informed, risk-based decisions while balancing security with business enablement.

Security Program Execution

• Support the implementation and adoption of security capabilities, controls, and standards.
• Track security improvement initiatives, remediation plans, and agreed actions to ensure sustained progress.
• Contribute to vulnerability management, incident response, resilience, and business continuity activities.
• Support continuous improvement of the organization's security maturity and overall risk posture.
• Promote secure-by-design and privacy-by-design principles across technology and business initiatives.

Leadership & Stakeholder Management

• Build effective working relationships with business leaders, technology teams, architects, engineers, risk functions, and assurance stakeholders.
• Provide constructive challenge when security risks are not adequately understood, mitigated, or governed.
• Promote a culture of security ownership and shared accountability.
• Support knowledge sharing and development of security capabilities across relevant teams.
• Influence stakeholders toward pragmatic, risk-informed security decisions.

Required Experience:

• Proven experience in an Information Security, Cybersecurity, Security Management, or Security Architecture role within a complex technology environment.
• Strong understanding of enterprise IT and security architectures.
• Practical knowledge across multiple areas including:
• Cloud security
• Network security
• Endpoint security
• Identity and access management
• Application security
• Data protection
• Vulnerability management
• Cybersecurity operations
• Demonstrated experience conducting security risk assessments and managing remediation activities.
• Strong understanding of security governance, controls, and recognized security frameworks.
• Ability to review technical designs and architectures and identify security weaknesses and risks.
• Experience working with engineering, architecture, infrastructure, and operations teams.
• Strong stakeholder-management and communication skills.
• Ability to communicate technical security risks clearly to non-technical and senior stakeholders.
• Confidence to challenge decisions and recommendations where security risks require further consideration.
• Ability to balance security requirements with business priorities, cost, and delivery objectives.

Desirable

• Experience with recognized information security frameworks and standards such as ISO 27001, NIST, or CIS.
• Experience supporting security audits, assurance activities, or regulatory assessments.
• Experience with security transformation or maturity programs.
• Experience in large-scale digital or technology transformation environments.
• Relevant professional security certifications.