IT & Security Lead (RSSI)

About the role

Dolead, a digital marketing and data company supporting 200+ clients across 15 countries, is hiring its first IT & Security Lead (RSSI) in Paris. The role builds a practical, reliable security framework with genuine ownership, working closely with Engineering, HR, Legal, Operations and business teams, as well as an external IT partner. The position is full-time (CDI) and hybrid.

Key responsibilities

• Define and implement security policies on data sharing, passwords, devices, access controls and business continuity, and set up security governance with risk assessments
• Secure SaaS tools (Google Workspace, Slack, Notion, ClickUp) and advertising accounts (Meta, Google Ads, TikTok) through SSO, MFA, privileged access and regular access reviews
• Set up onboarding and offboarding processes with HR and coordinate vulnerability assessments, incident reviews and security monitoring
• Work with DevOps on cloud security, secrets management and secure development, and automate checks with scripts
• Build security awareness, train teams, and partner with Legal on GDPR and US privacy requirements
• Support client security assessments and prepare for ISO 27001 or SOC 2

Required profile

• Solid experience in IT security or security governance, with a track record of building and improving security processes
• Strong SaaS and identity security knowledge, including SSO, MFA, access management and Google Workspace
• Hands-on technical skills, including automating checks with Python, Bash or similar
• Understanding of GDPR, US privacy regulations and standards such as ISO 27001, SOC 2 or CIS Controls
• Fluent French and English, mandatory

Nice to have

• Startup or scale-up experience
• Familiarity with advertising platform security (Meta Business Manager, Google Ads, TikTok Business Center)
• Certifications such as CISSP or CISM

What we offer

• SideCare health insurance fully covered by Dolead
• Lunch voucher (Swile card, 13 EUR/day, 50% covered) and 25 vacation days plus 8 RTT
• Flexible remote policy of up to 2-4 days per week