Information Security and Data Protection Manager

You want to join a company that places people at the heart of its concerns? We are waiting for you at Extia!

Extia is an engineering consultancy which proposes since 2007 an unprecedented approach in its sector by combining well-being and performance at work. A successful model: more than 3000 Extians working in 22 agencies in France and abroad, 1st Great Place To Work® in France, 160 millions of euros of turnover and plenty of energy!

At Extia, it's "First who, then what" so, let's do it!

First who:

• Cybersecurity professional with experience in security governance, risk management, and data protection
• Strong knowledge of security policies, standards, controls, and GDPR
• Experience with cybersecurity risk assessments, vulnerability management, audits, and incident management
• Strong communicator, comfortable working with senior management, technical teams, auditors, and external providers
• Proactive, autonomous, and able to drive continuous security improvements
• Strong awareness of cyber threats, security technologies, and regulatory requirements

Then what:

What You'll Do:

• Develop and continuously improve the cybersecurity and data protection strategy
• Define and maintain security policies, standards, procedures, and controls
• Manage cybersecurity risks, vulnerability assessments, penetration testing, and security assessments
• Ensure GDPR compliance and promote Security & Privacy by Design
• Lead security incident management and support business continuity and disaster recovery
• Monitor and report security KPIs, risks, and overall security posture to senior management
• Coordinate security audits and ensure remediation of findings
• Develop cybersecurity awareness programmes and support security best practices across the organization
• Manage relationships with security providers, auditors, and regulatory authorities
• Monitor emerging cyber threats, technologies, and regulations and recommend improvements

What We're Looking For:

• Strong experience in Cybersecurity, Information Security, and Governance
• Good knowledge of Risk Management, GDPR, and Security Controls
• Experience with incident management, audits, vulnerability management, and security assessments
• Excellent communication and stakeholder management skills
• Ability to work autonomously and collaboratively in an international environment