Operational Cybersecurity Lead For Cma Media H/F CMA CGM

CMA Media, a subsidiary of the CMA CGM Group, is a key player in the global media landscape, combining innovation and operational excellence to deliver impactful content and digital solutions. With a portfolio that includes leading brands such as La Provence, Corse Matin, La Tribune, Brut, RMC, and BFM, CMA Media operates across multiple sectors, making cybersecurity a cornerstone of its operations.

As part of the CMA CGM Group's commitment to securing and ensuring the resilience of its operations, the Operational Cybersecurity Manager will play a pivotal role in protecting CMA Media's assets, data, and operations. The position reports functionally to the Chief Operations Officer (COO) of RMC BFM and is attached to the CISO Office Service Line within the Group Cybersecurity Department.

Based at the RMC BFM headquarters in Paris, the manager will oversee cybersecurity for all CMA Media entities, supported by an Operational Cybersecurity Expert responsible for orchestrating and implementing the Group's defined cybersecurity strategy and controls.

Main Responsibilities

As the Operational Cybersecurity Manager, you will:

- Develop and implement cybersecurity strategies: Design and execute an operational cybersecurity strategy tailored to CMA Media, in alignment with the Group's overall strategy, findings, directives, and objectives.
- Governance and reporting: Maintain functional alignment with the Group Cyber Department while reporting directly to CMA Media's COO to ensure seamless integration of cybersecurity efforts.
- Supervise and guide teams: Lead and support the Operational Cybersecurity Expert, ensuring effective implementation of cybersecurity controls across all CMA Media entities.
- Risk assessment and mitigation: Identify and assess cybersecurity risks, supporting the Group's Information Security Risk Management team in defining optimal mitigation strategies across various operational environments, and oversee their implementation.
- Incident management: Serve as the key point of contact for the Group's Cyber Defense Center regarding incident response activities related to CMA Media, ensuring prompt resolution of cybersecurity incidents.
- Compliance and standards: Ensure compliance with global and industry standards such as ISO 27001 and NIST, while meeting media-specific regulatory requirements in coordination with the Group's cybersecurity governance and compliance teams.
- Cross-entity collaboration: Work closely with IT teams, business units, and Group stakeholders to embed cybersecurity best practices into all processes and projects.
- Awareness and training: Promote a strong cybersecurity culture by contributing to the development and implementation of training programs for employees across all CMA Media entities, in close collaboration with the Group's Human Risk Management team.

Technical Skills

- Expertise in cybersecurity frameworks (e.g., ISO 27001, NIST CSF, CIS Controls).
- Strong understanding of IT and OT security, including media-specific systems (broadcasting, social media, digital platforms) and cloud environments.
- Proficiency in cybersecurity tools such as endpoint protection, vulnerability management, network security, threat intelligence platforms, and security operations.
- Knowledge of regulatory requirements, including media industry compliance needs.
- Experience in designing and managing incident response and business continuity plans.

Behavioral Skills

- Strategic thinking and problem-solving abilities with a focus on aligning security initiatives with business goals.
- Exceptional leadership and team management skills, fostering collaboration and motivation.
- Strong communication skills for engaging with both technical and non-technical stakeholders.
- Resilience and adaptability in high-pressure environments, particularly during incident management.
- Ethical mindset with a commitment to confidentiality and integrity.

Profile

- Bachelor's or Master's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
- Relevant certifications such as CISSP, CISM, ISO 27001, or CISA are highly desirable.

Experience

- 8-10 years of experience in cybersecurity, including at least 3-5 years in a leadership role.
- Proven ability to manage cybersecurity in complex organizations, ideally within the media or similar industries.
- Experience working in a matrix organization, balancing both functional and direct reporting lines.

Soft Skills

- Visionary leadership to drive cybersecurity innovation and resilience.
- Collaborative spirit for effective teamwork across diverse entities.
- Strong organizational and prioritization skills to manage multiple responsibilities and stakeholders.
- Continuous learning mindset to stay ahead of emerging cybersecurity trends and challenges.

Join CMA Media and take the lead in shaping a secure and resilient future for one of the world's most dynamic media organizations. If you're ready to take on this exciting challenge, we encourage you to apply and make an impact.

Please ensure you are familiar with the CMA CGM Corporate Internal Mobility guidelines