Director of Cybersecurity & IT

About This Opportunity

Our talent team is representing a confidential e-commerce organization headquartered in Paris. We are seeking a Director of Cybersecurity & IT to define and lead the next phase of security and technology operations maturity. Reporting to the VP of Platform Engineering, you will be a strategic leader at the intersection of cybersecurity, IT, risk, compliance, and business growth.

This is a director-level role focused on setting direction, developing leaders, aligning stakeholders, making sound investment choices, and ensuring measurable outcomes. You will lead a multi-disciplinary organization through existing functional managers, creating the clarity, operating rhythm, and investment focus needed to protect the business while enabling the company to move quickly.

Responsibilities

Strategy & Investment Leadership

• Define and evolve a multi-year Cybersecurity & IT strategy aligned with business goals, risk appetite, technology strategy, and growth plans
• Translate strategy into a focused portfolio of initiatives with clear outcomes, sequencing, ownership, dependencies, and success measures
• Own the operating rhythm for planning, budgeting, program tracking, KPI and SLA reporting, risk reviews, and executive communication
• Make pragmatic investment and prioritization recommendations balancing resilience, customer trust, regulatory expectations, employee experience, and engineering velocity

Leadership & Team Development

• Lead through managers and senior individual contributors responsible for Security Operations, Governance Risk & Compliance, IT Operations Engineering, IT Support, and security engineering capabilities
• Coach, challenge, and develop leaders, helping them grow their scope, judgment, influence, and team-building abilities
• Create clear career paths, succession plans, and development opportunities across the organization
• Build a high-trust environment where teams have genuine ownership, collaborate across boundaries, and continuously improve
• Attract and retain exceptional talent while raising the bar without creating unnecessary bureaucracy

Business Partnership & Risk Management

• Act as a trusted advisor to the VP of Engineering, CTO, Executive Committee, and senior leaders across the business
• Explain complex security, IT, and risk topics in clear business language, including trade-offs, options, costs, and consequences
• Own the cyber risk management process at the strategic level, using the GRC framework as the foundation for security decisions
• Ensure material risks, control gaps, exceptions, and remediation plans are visible, understood, and actively managed
• Support security compliance efforts across ISO 27001, PCI DSS, GDPR, NIS2, and contractual partner requirements
• Partner with Legal and DPO on data privacy strategy
• Represent security maturity and risk posture to investors, auditors, regulators, strategic partners, and major customers

Security & Technology Enablement

• Partner with Engineering and Product to ensure security requirements are integrated into development from the beginning
• Sponsor and evolve Product Security and secure software development lifecycle practices
• Ensure the security roadmap addresses the most important risks across cloud infrastructure, corporate systems, identity and access, endpoints, applications, data, and third-party services
• Set expectations for Security Operations across threat intelligence, vulnerability management, security monitoring, incident readiness, risk assessment, and fraud support
• Ensure IT Operations and IT Support provide reliable, scalable, high-quality experience for employees across global offices and remote workforce

Culture & External Engagement

• Foster a security-aware culture through clear communication about the threat landscape, key initiatives, and practical expectations
• Sponsor awareness, education, and Security Champion programs
• Represent the organization in security communities, industry groups, partner forums, and regulatory conversations
• Build trusted relationships with strategic technology partners, auditors, insurers, and external security providers

What We're Looking For

Required Experience & Qualifications

• 12 to 15+ years of experience across cybersecurity, information security, IT, or related technology leadership roles
• At least 5 years leading managers and multi-team organizations
• Proven track record of building, scaling, and developing organizations that span multiple security and/or IT domains
• Experience operating as a strategic partner to a CTO, VP Engineering, executive committee, or equivalent senior leadership group
• Proven expertise across security operations, cyber risk and governance, compliance and assurance, security architecture, product security, cloud security, IT operations, or corporate technology
• Demonstrated ability to turn business strategy and risk appetite into a practical security and IT roadmap, investment plan, and operating model
• Experience communicating security and technology risk to executive, board-level, investor, partner, audit, and non-technical audiences
• Experience leading through managers and senior experts, with genuine passion for developing people and building leadership capability
• Strong understanding of modern cloud, SaaS, identity, endpoint, application, data, and infrastructure security concepts
• Experience with security-by-design, secure software development lifecycle practices, and effective partnership with Engineering and Product teams
• Excellent written and verbal communication in English, with the ability to make complex topics clear and compelling
• The judgment, calm, and influence required to operate effectively in ambiguity, during incidents, and across competing stakeholder priorities

Preferred Qualifications

• Recognized certification such as CISSP, CISM, CISA, CRISC, CCSP, or equivalent
• Experience with ISO 27001, PCI DSS, GDPR, NIS2, or other relevant European regulatory and assurance frameworks
• Experience with GCP, Kubernetes, Terraform, modern cloud-native security tooling, or SaaS-first environments
• Experience in marketplace, e-commerce, fintech, or another business with meaningful customer, partner, or regulatory trust requirements
• Experience with AI security, fraud prevention, third-party risk, or software supply chain security
• Experience working in a fast-growing, international organization with distributed teams
• French language skills

How We Work With You

When you apply through Get A Job.ai, here's what happens:

• You submit your application directly on our platform at getajob.ai
• A recruiter from our talent team will screen your background and experience
• If there's a strong match, we'll submit your profile to our client for consideration
• Our client will conduct their interview process, which typically includes: a phone call with the Technical Talent Acquisition Partner, a deep-dive interview with the VP of Engineering, a leadership and management interview with peer directors, a team meeting, a stakeholder interview with cross-functional partners including the CTO, and a cultural and values interview with a C-level leader
• We support you throughout the entire process and handle all coordination

Important: Please do not attempt to contact our client directly. All communication and applications must go through Get A Job.ai to be considered for this position.

Pay

Compensation details will be discussed during the screening process with our recruiting team.

Equal Employment Opportunity

Get A Job.ai is committed to providing equal employment opportunities to all qualified applicants regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or veteran status. We encourage applications from candidates of all backgrounds and experiences.