Cybersecurity Program Director H/F CMA CGM

THE ROLE

Reporting directly to the Group Chief Information Security Officer, the Cybersecurity Program Director leads and drives the Group cybersecurity project portfolio. Acting as the Group CISO's senior program lead, the position ensures that strategic priorities are translated into coordinated, deliverable and measurable programs across IT, Cybersecurity and business functions.
This is a highly transversal leadership position with no direct management responsibility. Success relies on influence, credibility and the ability to create alignment across multiple entities, functions and senior stakeholders. The Program Director provides consolidated weekly reporting at executive level and supports the Group CISO and Group CIO with clear visibility of progress, dependencies, risks and decisions required.
The role combines strategic and tactical responsibilities, from long-term transformation roadmaps to short-term operational priorities and crisis coordination. A risk-based approach is essential to focus resources and executive attention on the Group's most critical exposures.

WHAT ARE YOU GOING TO DO?

- Own the overall governance and coordination of the Group cybersecurity program portfolio, ensuring consistency with the Group cyber strategy and risk priorities.
- Translate Group CISO priorities into integrated roadmaps, milestones, accountabilities, dependencies and executive decision points.
- Align IT, Cybersecurity, business functions and Group entities to accelerate delivery and remove organisational or technical blockers.
- Lead through influence across a complex matrix organisation, creating commitment and accountability without direct hierarchical authority.
- Prepare and deliver weekly executive-level reporting to the Group CISO and relevant Group executives, including the Group CIO, with concise views of progress, risks, budget considerations, dependencies and required arbitrations.
- Challenge project assumptions, technical options, architectures, delivery plans and risk-acceptance positions to ensure solutions are robust, proportionate and executable.
- Apply a risk-based approach to portfolio prioritisation, sequencing investments according to business criticality, threat exposure, control gaps and delivery capacity.
- Coordinate cyber transformation topics at both strategic and tactical levels, while remaining able to mobilise quickly on urgent operational priorities.
- Anticipate cross-program dependencies and conflicts, facilitate arbitration and ensure that decisions are documented, communicated and implemented.
- Act as a trusted senior adviser to the Group CISO on program health, stakeholder alignment, delivery risks and executive communication.
- Support crisis situations by coordinating Cybersecurity, IT, business and entity stakeholders, structuring governance, actions, escalation paths and executive updates.
- Promote strong program discipline, including clear ownership, measurable outcomes, risk tracking, decision logs and benefits realisation.

ILLUSTRATIVE PROGRAM PORTFOLIO
- Group-wide asset inventory and improvement of visibility over critical technology assets.
- Deployment of phishing-resistant multi-factor authentication, including solution changes and rollout coordination across CEVA and other Group entities.
- Active Directory security reinforcement and reduction of identity-related attack paths.
- Cyber resilience programs covering preparedness, continuity, recovery and coordinated response capabilities.
- Additional cross-functional cybersecurity initiatives requiring Group-level alignment, executive sponsorship and disciplined delivery.

WHO ARE WE LOOKING FOR?

- Significant experience leading complex cybersecurity transformation programs or portfolios in a large, international and matrixed organisation.
- Previous experience as a CISO, Deputy CISO, Cybersecurity Program Director, Cyber Transformation Director or senior cyber leader with broad exposure to cybersecurity domains and projects.
- Demonstrated ability to coordinate multiple high-impact programs across IT, Cybersecurity and business organisations without relying on direct authority.
- Strong understanding of cybersecurity architecture, identity and access management, infrastructure security, resilience, risk management and major transformation delivery.
- Ability to challenge technical content and engage credibly with architects, engineers, security specialists, senior IT leaders and business executives.
- Proven experience producing executive reporting, supporting senior governance forums and presenting complex program matters in a clear, decision-oriented manner.
- Experience managing rapidly changing priorities and combining immediate operational needs with long-term strategic objectives.
- Experience in cyber crisis coordination or major-incident governance is highly valued.
- Fluent French and English are mandatory.
- Position based in Marseille.

LEADERSHIP PROFILE

- Strong political acumen and stakeholder-management capability, with the judgement to navigate competing priorities and secure alignment.
- Executive presence and credibility, with the ability to act as a trusted extension of the Group CISO.
- Outcome-oriented leadership style, combining strategic perspective, operational pragmatism and strong delivery discipline.
- Excellent communication, negotiation and synthesis skills, particularly for executive and board-level audiences.
- Calm and structured coordination under pressure, with the ability to create clarity and momentum during critical situations.
- High level of autonomy, integrity, resilience and accountability.

Please ensure you are familiar with the CMA CGM Corporate guidelines