Cybersecurity Manager

About the role

CyberVadis provides a scalable, cost-effective solution for third-party cybersecurity risk management, backed by EcoVadis, a provider of business sustainability ratings. As the most senior operationally involved information security professional, the Cybersecurity Manager shapes the cybersecurity strategy, develops robust security policies and procedures, and acts as the primary leader for cybersecurity at strategic and operational levels. The role reports to the Cybersecurity Research Director (also CISO).

Key responsibilities

• Define, implement and communicate the cybersecurity strategy so that it aligns with business objectives.
• Supervise the certification and ongoing maintenance of the Information Security Management System (ISMS) in compliance with ISO 27002:2022.
• Own continuous cybersecurity risk and incident management, proactively identifying and mitigating threats.
• Advise senior management on cybersecurity risks, emerging threats and their impact on the organisation.
• Maintain the CyberVadis ISMS ISO 27002:2022 certification.
• Manage an information security analyst/officer and help demonstrate CyberVadis's security posture to third parties.

Required profile

• Fluent in English and French, currently based in France.
• 5+ years of cybersecurity experience, preferably in a consultancy role.
• A mix of management and deep hands-on cyber security experience is mandatory.
• Experience in a global, multicultural, fast-paced team.
• Demonstrated experience operating an ISMS and drafting up-to-date policies and procedures.
• Self-motivated leadership, excellent communication and listening skills.
• Proven track record delivering effective business and technical security solutions, processes, tools and project management.

Required skills

• ISMS management and ISO 27002:2022 compliance.
• Policy and procedure drafting.
• Certifications are a plus: ISO 27001 Lead Auditor, ISC2, ISACA, GIAC, PASSI.