Location: Clichy, France

Reporting to: Group Chief Information Officer

Department: Group IT

Management Level: Member of the Group IT Management Committee and Member of the Group Information Security & Data Protection Risk Committee

Context and Purpose of the Role

As part of a strategic evolution in the bank’s cybersecurity governance, we are establishing a clear separation between the first and second lines of defense. This transformation follows several years of significant investment in cybersecurity and aims to reinforce the bank’s resilience against evolving cyberthreats.

To support this shift, the Group Chief Information Security Officer (CISO) will transition to the Risk organization, anchored in the second line of defense, who will be in charge to define security standards and to control the 1st line of defense. In parallel, we are creating a new position – Group Head of Cybersecurity Operations – within the Group IT department to lead the first line of defense on all IT security-related topics.

This is a newly created role, reflecting the bank’s commitment to operational excellence and robust cyber risk management. The position will play a pivotal role in steering the cybersecurity agenda across the Group’s IT landscape.

Key Responsibilities

The Group Head of Cybersecurity will lead a team of approximately 60 professionals across three countries (Germany in Frankfurt and in Saarbrücken, France in Paris, and Tunisia in Tunis), overseeing the following four key domains:

1. Security Operations Centre (SOC)

Ensure 24/7 monitoring, detection, and response to security incidents according to Service Level Agreements.

2. Identity & Access Management (IAM)

Govern and manage access rights across the bank according to our policies, ensuring compliance and least-privilege principles.

3. Cybersecurity Infrastructure & Transformation

Drive the implementation of regulatory and cybersecurity projects in a timely fashion manner and remediate risks identified by the second line of defense.

4. Cybersecurity Demand

Evaluate and validate the security posture of business projects, ensuring alignment with Group security standards.

Profile and Requirements

• Strong technical expertise in IT Security is essential. The ideal candidate must demonstrate deep knowledge of cybersecurity technologies, architectures, and threat landscapes.
• Proven leadership experience in managing multi-disciplinary and geographically distributed teams.
• Strategic mindset with the ability to translate security needs into actionable programs.
• Experience in regulated environments and ability to interact professionally with internal or external auditors and supervisors, particularly in financial services, is a strong asset.
• Excellent communication and stakeholder management skills, with the ability to engage at executive level, to influence non-technical stakeholders and to foster a security-first mindset.

Regular travels to Saarbrücken, Frankfurt and Tunis.

Languages

French: Native proficiency required

English: Fluent

German: A plus