Governance, Risk and Compliance Leader

Thales
France
Workplace: OnsiteFull timeFunction: Legal, Risk & ComplianceEducation: mastersSkills: ["Leadership","Cross-functional coordination","Communication","Analytical thinking","Problem solving"]

Define and maintain cybersecurity governance frameworks, policies, standards, and guidelines for BMN and IS/IT environments. Organize governance committees focused on cyber risk and compliance, support the CISO with regulatory monitoring, and lead risk analyses across BMN/IS-IT systems. Manage third-party risk, ensure compliance with regulations and standards (including NIS2 and ISO 27001), and support audits/controls to guarantee internal, regional, and national cybersecurity conformity.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Thales
Thales
1 day ago

Governance, Risk and Compliance Leader

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 19 hours agoStatus: Live

Job Summary

Define and maintain cybersecurity governance frameworks, policies, standards, and guidelines for BMN and IS/IT environments. Organize governance committees focused on cyber risk and compliance, support the CISO with regulatory monitoring, and lead risk analyses across BMN/IS-IT systems. Manage third-party risk, ensure compliance with regulations and standards (including NIS2 and ISO 27001), and support audits/controls to guarantee internal, regional, and national cybersecurity conformity.
Location: France
Workplace: Onsite
Employment Type: Full time
Job Function: Legal, Risk & Compliance

Key Responsibilities

  • •Ensure compliance with applicable French and European regulations, especially NIS2.
  • •Define and maintain cybersecurity governance frameworks, policies, standards, and guidelines for BMN and IS/IT environments.
  • •Prepare governance committees (COCYB) centered on cyber risk and compliance and contribute to performance improvements.
  • •Support the CISO through continuous monitoring of regulatory, sector, and technology changes and recommend adaptations.
  • •Pilot and coordinate risk analyses for BMN and IS/IT systems, including threat/vulnerability identification and risk reduction strategy tracking.

Key Requirements

  • •Master’s-level engineering education (Bac+5 or equivalent).
  • •Solid knowledge of cybersecurity governance and risk management frameworks such as ISO 27001, NIST, or CIS Controls, plus French/EU security regulations.
  • •Expertise in European/international regulations including NIS2, RGPD, ITAR and export control compliance.
  • •Good understanding of network architectures, industrial protocols, and associated security measures.
  • •Experience using vulnerability assessment and intrusion testing techniques, analyzing cyber reports, and coordinating GRC platforms such as Agile RM.
Experience:CybersecurityGRCAerospaceSatellite systemsIndustrial security
Education:Master's
Skills:LeadershipCross-functional coordinationCommunicationAnalytical thinkingProblem solving
Tech Stack:NIS2ISO 27001NISTCIS ControlsRGPDITARGPSSIPSSIBMNIGI 1300II 901IM 900Agile RMVulnerability assessmentIntrusion testing

Eligibility

Security Clearance:Habilitation (secret de la défense nationale)

Company Brief

Thales
Designs and delivers advanced systems and services for aerospace, defence, security, and digital identity and cybersecurity markets, serving government and commercial customers worldwide.
Industry: Defense Technology
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Paris, France
Founded: 2000
WebsiteLinkedIn