Information Systems Security Manager (CISO) At Doctors Without Borders

Médecins Sans Frontières, an international humanitarian medical association created in 1971, provides medical assistance to populations whose lives are threatened: mainly in the event of armed conflict, but also epidemics, pandemics, natural disasters or exclusion from care. The French section is present in around thirty countries.

As part of the creation of a permanent position, we are looking for a: Information Systems Security Manager (CISO)

Mission :

The Information Systems Security Manager (CISO) defines and manages the IS security strategy (ISS) within the organization in order to respond to the IS security challenges for the organization. and to comply with the regulations in force in the countries where the organization operates.

Main responsibilities:

Under the hierarchical responsibility of the Director of Information Systems (DSI)

Main job activities:

Define the Information System security strategy with the CIO and promote it

Identify security issues, major security risks weighing on the organization and legal and regulatory compliance requirements in relation to the DPO,
Define the strategic axes and objectives and associated indicators in terms of ISS and cybersecurity, define governance and multi-year action plans,
Report regularly and provide an advisory role to the IT department, CEO and business departments
Represent the organization in relations with IS regulatory authorities

Define the SSI policy and ensure its implementation

Define the information systems security policy (PSSI) (prevention, protection, detection, resilience, remediation), security and cybersecurity norms and standards within the organization,
Drafting, updates and evolution of the entire framework relating to the ISS, in particular the PSII, PRA, PCA,
Define the organizational and technical measures to be implemented to achieve security objectives,
Manage the implementation of the organization’s ISS policy and ensure its application (by all departments)

Manage the projects identified for this implementation

Evaluate the means to be implemented (human, technical, financial, etc.) for the project.
Supervise and coordinate the work of all project stakeholders and lead internal or external teams (service providers, MSF Movement)
Define and evaluate objectives, carry out or participate in annual project team interviews
Organize meetings of the steering committee and ad hoc project committees

Monitor the Maintenance of Security Conditions (MCS) of information systems

Ensure that security plans have been made according to pre-established plans,
Guarantee the implementation of measures to manage the security and vulnerabilities of the company,
Audit and diagnose processes and tools in conjunction with technical teams in order to preserve the integrity and continuity of IS,
Manage and control their implementation.

Identify and assess IS security incidents

Handle and process security alerts in coordination with operational teams in France and internationally where applicable,
Analyze and assess the risks and threats linked to incidents,
Ensure that the security crisis management system is operational.

Ensure technological monitoring and cross-Movement collaboration

Follow regulatory and technical developments in your field;
Monitor the developments necessary to guarantee IS security
Ensure the link and respond to requests from other groups working on IS security in the Movement and international partners

Required profile

Training: You have a higher education (Bac +5 minimum) in information systems security.

Experience: You have a minimum of 4 years’ experience in IS Security (in an international context for certain missions)

SKILLS :

Mastery of IT security standards (EBIOS, ISO 2700X, etc.), publications from ANSSI, NIST, Cybersecurity, GDPR standards and procedures, drafting and maintaining a PSSI / PCA / PRA, etc.
Mastery of project management.
Knowledge of Information Systems urbanization
Good knowledge of IT architecture, systems infrastructure, networks and communications

Required qualities :