Chief Information Security Officer (CISO) H/F

h3Chief Information Security Officer (CISO) H/F /h3h3Chief Information Security Officer (CISO) H/F /h3pGet AI-powered advice on this job and more exclusive features. /ppBorn in France in 2006, Voyage Privé has grown from an ambitious startup into becoming the Europe's leading travel tech platform. Operating across 9 markets with tens of millions of users, we're not just another e-commerce success story - we're a tech powerhouse revolutionizing online travel.br/ppAs a mission-driven company, we're unique in combining cutting-edge technology with social impact. Our innovative campus brings together tech talent, professional athletes, students, and artists, creating an ecosystem where digital innovation drives both business growth and positive change.br/ppWe're now at an inflection point, upgrading our entire technical foundation with cloud architecture, AI, and real-time systems to become a reference and top-of-mind platform for luxury travel, known by travelers for its for excellent offer and customer experience, and by our providers as a high-performance business development partner.br/ppstrongWhy Join Us?br/strong /ppWork at the intersection of cutting-edge technology and a mission-driven company, transforming how millions experience travel.br/ppBe part of an entrepreneurial team of innovators that isn't just building technology: we value innovation, ownership, and collaboration, with an emphasis on empowering engineers to make a difference.br/ppShape a fast-growing tech company as we embark on an ambitious plan to scale tenfold in the next decade.br/ppFast-paced, innovative environment with a real impact on high-end travel experiences.br/ppA chance to lead security efforts at a strategic and operational level.br/ppDirect visibility with the CDO and ExCom, shaping the future of security in a dynamic industry.br/ppA collaborative, tech-driven culture that values security as a business enabler.br/ppEnjoy a workplace that invests in personal and professional development, offering learning programs, mentorship opportunities, and career growth pathways.brbr/pppBorn in France in 2006, Voyage Privé has grown from an ambitious startup into becoming the Europe's leading travel tech platform. Operating across 9 markets with tens of millions of users, we're not just another e-commerce success story - we're a tech powerhouse revolutionizing online travel.br/ppAs a mission-driven company, we're unique in combining cutting-edge technology with social impact. Our innovative campus brings together tech talent, professional athletes, students, and artists, creating an ecosystem where digital innovation drives both business growth and positive change.br/ppWe're now at an inflection point, upgrading our entire technical foundation with cloud architecture, AI, and real-time systems to become a reference and top-of-mind platform for luxury travel, known by travelers for its for excellent offer and customer experience, and by our providers as a high-performance business development partner.br/ppstrongWhy Join Us?br/strong /pullipWork at the intersection of cutting-edge technology and a mission-driven company, transforming how millions experience travel.br/p /li /ulullipBe part of an entrepreneurial team of innovators that isn't just building technology: we value innovation, ownership, and collaboration, with an emphasis on empowering engineers to make a difference.br/p /li /ulullipShape a fast-growing tech company as we embark on an ambitious plan to scale tenfold in the next decade.br/p /li /ulullipFast-paced, innovative environment with a real impact on high-end travel experiences.br/p /li /ulullipA chance to lead security efforts at a strategic and operational level.br/p /li /ulullipDirect visibility with the CDO and ExCom, shaping the future of security in a dynamic industry.br/p /li /ulullipA collaborative, tech-driven culture that values security as a business enabler.br/p /li /ulullipEnjoy a workplace that invests in personal and professional development, offering learning programs, mentorship opportunities, and career growth pathways.brbr/p /li /ulstrongJob Descriptionbr/strongpWe are a large, renowned, fast-growing e-commerce company specializing in high-end online travel experiences. Security is a strategic priority to maintain the trust our customers have placed in us.br/ppOur goal is to protect our assets, manage risk, ensure compliance with regulatory requirements (e.g., PCI-DSS v4, GDPR), and build customer trust, all while supporting innovation in our technology and operations, and a profound transformation of our systems to enable and power our ambitious growth objectives.br/ppWe are looking for a Chief Information Security Officer (CISO) who will define and execute a global security strategy, lead risk management efforts, and foster a strong security culture across the company. This role will be pivotal in securing our evolving infrastructure, enhancing governance, and demonstrating business impact through security initiatives.br/ppstrongKey Responsibilitiesbr/strong /ppstrong1. Define, Drive, and Execute the Security Strategy Roadmapbr/strong /pulliDevelop and maintain a comprehensive security strategy that covers technical, organizational, and physical security aspects. /liliBuild and execute a structured security roadmap aligned with the company’s business and technical transformation. /liliIdentify, assess, and prioritize information security risks (technical, organizational, human) and define appropriate mitigation plans. /liliEnsure compliance with industry regulations and standards (PCI-DSS v4, GDPR, and other relevant frameworks) in collaboration with legal and business teams. /liliRegularly report security progress, risks, and achievements to the Chief Digital Officer (CDO) and the Executive Committee (ExCom) through Quarterly Business Reviews (QBRs). /li /ulpstrong2. Proactive Risk Management, Automation Business Impactbr/strong /pulliImplement risk-based security measures and establish a continuous improvement approach for security operations. /liliDevelop automated security dashboards to provide real-time visibility on security posture, including risks, incidents, and security initiatives. /liliDemonstrate tangible business impact of security actions (e.g., revenue protection, reduced fraud, SLA adherence, strengthened partner trust). /liliEstablish Key Performance Indicators (KPIs) to measure security effectiveness and ensure alignment with business objectives. /li /ulpstrong3. Technical, Physical, and Network Securitybr/strong /pulliOversee physical security measures (e.g., access controls, video surveillance, alarms) in coordination with infrastructure and facilities teams. /liliEnsure the security of networks, cloud infrastructure, and hybrid environments (on-premises + cloud). /liliSecure our API-driven, microservices-based architecture, working closely with DevOps and cloud teams. /liliDrive Security by Design and Zero Trust principles in all technology initiatives. /li /ulpstrong4. Leadership, Team Management Cross-Team Collaborationbr/strong /pulliCollaborate with product, data, engineering, infrastructure and legal teams to integrate security across all business functions. /liliWork alongside the Office IT Manager for security-related actions within Microsoft environments (Active Directory, Office 365, MFA, etc.). /liliFoster executive buy-in and ensure that security is seen as a business enabler, not a blocker. /li /ulpstrong5. Security Awareness Culture Developmentbr/strong /pulliPromote a strong security culture throughout the company, ensuring all employees understand their role in cybersecurity. /liliImplement company-wide security awareness programs, including phishing simulations and best practices training. /liliAct as a trusted advisor on security matters, maintaining a pragmatic and educational approach. /li /ulpstrong6. Data Protection, GDPR Third-Party Risk Managementbr/strong /pulliEnsure compliance with GDPR and data privacy regulations, working closely with legal teams. /liliOversee data protection, anonymization, and secure storage practices. /liliManage third-party risk by ensuring vendors and partners meet security standards before integration. /li /ulpstrong7. Incident Management Continuous Improvementbr/strong /pulliEstablish a structured incident management process, covering detection, response, mitigation, and post-incident reviews. /liliLead internal and external security audits, including penetration tests, organizational security reviews, and compliance assessments. /liliStay ahead of emerging cybersecurity threats and adapt security strategies accordingly. /li /ulpstrong8. Budget Security Investmentsbr/strong /pulliDefine and manage the security budget, ensuring cost-effective investments in security tools and technologies. /liliJustify security spending by demonstrating ROI and risk reduction benefits.br/li /ulstrongQualificationsbr/strongpstrongTechnical Skills:br/strong /pullipProficiency in IT security tools and concepts:br/p /li /ulullipAccess management (IAM, SSO, MFA).br/p /li /ulullipInfrastructure security (firewalls, VPNs, network monitoring, Wi-Fi security).br/p /li /ulullipApplication security (OWASP Top 10, API Gateway).br/p /li /ulullipStrong knowledge of standards and certifications: PCI-DSS, ISO 27001, GDPR (in collaboration with the legal team).br/p /li /ulullipExperience in hybrid environments (on-premise + cloud) and transformation projects.br/p /li /ulullipAdvanced skills in dashboard creation and automated reporting, with a focus on demonstrating business impact (tools like Power BI, Tableau, or security-specific solutions).br/p /li /ulpstrongSoft Skills:br/strong /pullipLeadership and Influence: Ability to mobilize and convince diverse stakeholders, including COMEX members.br/p /li /ulullipBusiness-Oriented Vision: Capable of translating security actions into tangible business results.br/p /li /ulullipAutonomy and Structure: Skilled at prioritizing and structuring projects in a complex and evolving environment.br/p /li /ulullipPedagogy and Communication: Ability to simplify technical issues and foster adoption of security priorities.br/p /li /ulullipResults-Driven: Transforming action plans into measurable and impactful outcomes.br/p /li /ulpstrongExperience and Education:br/strong /pullipSignificant experience (5+ years) as a CISO, RSSI, or security expert in a related environment (e-commerce, SaaS, cloud).br/p /li /ulullipKnowledge or interest in the travel industry (ticketing, GDS connectivity, etc.) is a plus.br/p /li /ulullipEngineering degree or Master’s in cybersecurity. Certifications preferred: CISSP, CISM, ISO 27001 Lead Auditor/Implementer.br/p /li /ulpstrongWhy Join Us?br/strong /pullipA Strategic Role: Be at the heart of the company’s digital transformation and security efforts.br/p /li /ulullipStrong Autonomy: Structure a long-term vision while relying on internal and future technical resources.br/p /li /ulullipExciting and Varied Challenges: Hybrid architecture, technological overhaul, and security governance.br/p /li /ulullipStimulating Environment: Collaboration with multidisciplinary teams and cutting-edge technologies (cloud, microservices).brbr/p /li /ulstrongAdditional Informationbr/strongpstrongYou'll love joining us...br/strong /pullipAt Voyage Privé, the “entrepreneurial adventure” is a reality: take on ambitious and fulfilling projects, while joining a company committed to the growth of its teams.br/p /li /ulullipLive in the South of France, in an exceptional natural, economic and cultural environment, on a modern, digital and eco-responsible campus.br/p /li /ulullipFind your own balance with up to 2 days of telecommuting per week, which you can concentrate on one week at a time, up to 4 times a year.br/p /li /ulullipPut meaning back into your work and discover a unique ecosystem, creating bridges between worlds that are often far apart: the economic, sporting, academic and social worlds, and take part in one of the Vision projects (Ecole des XV - Provence Rugby - VP Green- Les Tremplins - Chez Pierre).br/p /li /ulullipCancel your sports subscription! Access our large Campus gym morning, noon and night, and play Padel whenever you like on our court reserved exclusively for Voyage Privé employees...br/p /li /ulullipLive to the rhythm of Voyage Privé's various Business Fun highlights (Company Breaks, Carnival, Annual Convention...), take part in meetups and talks, and enjoy free tickets to every Provence Rugby home match or dance to the sounds of the Dalida Institute!br/p /li /ulullipWould you like to take advantage of our getaway offers? Benefit from up to 20% off our irresistible prices. /p /li /ul /ph3Seniority level /h3ullih3Seniority level /h3Mid-Senior level /li /ulh3Employment type /h3ullih3Employment type /h3Full-time /li /ulh3Job function /h3ullih3Industries /h3Travel Arrangements /li /ulpReferrals increase your chances of interviewing at Voyage Privé by 2x /ph3Sign in to set job alerts for “Chief Information Security Officer” roles. /h3pWe’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI. /p #J-18808-Ljbffr