Group chief information security officer h/f

Cerba HealthCare, acteur de référence du diagnostic médical, a pour ambition d'accompagner l'évolution des systèmes de santé vers plus de prévention. Il s'appuie sur plus de 50 ans d'expertise en biologie médicale pour mieux évaluer le risque de développement des maladies, dépister et diagnostiquer plus en amont les pathologies et optimiser l'efficacité des traitements en les personnalisant.

Chaque jour, sur les 5 continents, les 14 000 collaborateurs du Groupe accompagnent la transformation de la médecine, animés d'une même conviction profonde : faire avancer le diagnostic, c'est faire progresser la santé.

Cerba HealthCare, éclairer la santé.

Pour plus d'information : http://www.cerbahealthcare.com Key responsibilities
Establish Governance and Build Knowledge
Establish and maintain the cybersecurity governance structure
Provides regular reporting on the status of the cybersecurity program
Develops, socializes and coordinates approval and implementation of security policies
Directs the creation of a targeted cybersecurity awareness training program for all employees
Advises on the cyber risk posture of the organization, including the mandatory application of controls
Coordinates security programs globally and mobilize employees in all locations

Lead the Organization
Leads the cybersecurity function across the company
Determines the cybersecurity approach and operating model in consultation with stakeholders
Manages an effective cybersecurity organization, consisting of direct reports and dotted line reports.
Defines and facilitates the processes for cybersecurity risk and for legal and regulatory assessments.
Ensures that security is embedded in the project delivery process by providing the appropriate cybersecurity policies, practices and guidelines
Manages and contains cybersecurity incidents and events to protect corporate IT assets, intellectual property, regulated data and the company's reputation
Monitors the external threat environment for emerging threats, and advises relevant stakeholders on the appropriate courses of action
Develops and oversees effective resilience policies and standards
Coordinates the development of implementation of incident response plans and procedures
Facilitates and supports the development of asset inventories, including information assets in cloud services and in other parties in the organization's ecosystem

Set the Strategy
Develops a cybersecurity vision and strategy
Develops, implements and monitors a strategic, comprehensive cybersecurity program to ensure appropriate levels of confidentiality, integrity, availability of information assets owned, controlled or/and processed by the organization as well as the meeting of safety, privacy, reliability and resilience requirements as needed.
Works effectively with business units to facilitate cybersecurity risk assessment and risk management processes.

Build the Network and Communicate the Vision
Creates the necessary internal networks
Builds and nurtures external networks consisting of industry peers, ecosystem partners, vendors and other relevant parties to address common trends, findings, incidents and cybersecurity risks
Liaises with external agencies, such as law enforcement and other advisory bodies, as necessary, to ensure that the organization maintains a strong security posture and is kept well-abreast of the relevant threats identified by these agencies
Liaises with the enterprise architecture team to build alignment between the security and enterprise (reference) architectures.