Head of Cyber Security Program Governance

Be part of the solution at Technip Energies and embark on a one-of-a-kind journey. You will be helping to develop cutting‑edge solutions to solve real‑world energy problems. About us Technip Energies is a global technology and engineering powerhouse. With leadership positions in LNG, hydrogen, ethylene, sustainable chemistry, and CO2 management, we are contributing to the development of critical markets such as energy, energy derivatives, decarbonization, and circularity. Our complementary business segments, Technology, Products and Services (TPS) and Project Delivery, turn innovation into scalable and industrial reality. Through collaboration and excellence in execution, our 17,000+ employees across 34 countries are fully committed to bridging prosperity with sustainability for a world designed to last. About the Cyber Security Department at Technip Energies We are currently seeking a Head of Cyber Security Program Governance, reporting directly to Chief Information Security Officer to join our Cybersecurity Leadership team based in Paris, France, as a primary location. The role can also be based in Rome, Italy or Barcelona, Spain. The Cyber Security department at Technip Energies serves as the internal center of excellence, responsible for defining, implementing, and enforcing security across the entire enterprise, covering both IT and critical Operational Technology (OT) environments across our global footprint. We manage the entire cyber security lifecycle, including Cyber Risk Management, Compliance and Assurance, Cyber Security Architecture and Engineering, Security Operations, Cyber Awareness, as well as play an active role in delivering solutions to our customers. Cyber Security is a top‑of‑agenda priority for our Executive Committee (ExCom), fueling an aggressive, fully supported journey toward security excellence. We are innovators who leverage the most advanced technologies in detection, protection, and response, and we are rapidly integrating Artificial Intelligence (AI) into our operations. If you are driven by innovation and aspire to secure a highly dynamic, global organization, this is where you belong. Cyber Security Program Governance, part of the cyber security department, is a central strategic pillar which is responsible for defining, structuring, and overseeing the comprehensive Cyber Security Program support its execution and monitor its effectiveness. In addition, it is responsible for the Cyber Security Policy Governance, Cyber Security Compliance and Assurance. About the role Cyber security Program definition and governance Support the CISO in developing and maintaining a comprehensive, organization‑wide information security program aligned with evolving threat landscapes, business goals, and regulatory requirements. Monitor the financial aspect of the information security program measuring its efficiency (risk reduction versus costs) and manage the entire budget of security functions. Own the Information and Cyber Security Policy and Standard Framework. Define information security policies, standards, guidelines and procedures ensuring they are embedded into all business processes from the outset. Support internal stakeholders (First Line of Defense) in the design and implementation of security controls on their assets, ensuring they are scalable, effective, and adaptable to changing risks. The main interface of the Information Security team is the PGP (Performance, Governance, Process) for the coordination and monitoring of the security initiatives. team Monitoring, reporting, and continuous improvement Monitor the execution of the security program and its effectiveness and regularly report its status Establish and track KPIs and KRIs to evaluate the effectiveness of security controls and the organization’s overall risk posture. Provide regular, transparent reports to the CISO and executive leadership and stakeholders on security metrics, incident trends, and compliance status. Cyber Security Policy Governance Be responsible for the cyber security policy framework and governance Certification, compliance and assurance Manage certification processes (., ISO 27001 to verify the level of compliance and enhance security maturity. Collaborate with other internal information security, legal and compliance and projects teams to gather security requirements and integrate them into the corporate Information Security Management System (ISMS). Monitor and verify the implementation of security controls, ensuring ongoing compliance with regulatory standards and internal policies. Be the main interface of the Information Security department with Internal Control. Conduct internal audits and compliance assessments to ensure continuous improvement and adherence to security policies. Stakeholder Engagement Act as a liaison between Digiteam, other business units to promote security initiatives and foster collaboration. Stay informed on emerging threats, regulatory changes, and technological advancements to proactively adapt the security program. Team Management Manage hierarchically a team of at least 6 people, based in different operating centers internationally - Subject Matter Experts of Cyber Security and Managers, taking responsibility for their performance evaluation, career development, etc. Starting Date : ASAP About you Catch this opportunity and invest in your skills development, should your profile meet these requirements. 10 + years of experience in Senior Information Security role in complex organizations. Bachelor or master's in cyber security, Computer Science, Information Technology Engineering or equivalent academic title is preferred. At least 10 years of experience in hierarchical team management. Certifications such as CISSP, CISA, CISM is a plus. Extensive knowledge of information security frameworks, standards, and best practices (ISO 27001, NIST, CIS Controls, is a must. Strong understanding of risk management, threat intelligence, incident response processes. Project and Program Management in Cyber Security : Skilled in managing complex security programs and projects, from planning to execution, ensuring timely delivery. Good knowledge of IT technology and architecture (Network, IT Infrastructure, Cloud). Familiarity with compliance requirements and certification processes relevant to theindustry. Strong stakeholder management and negotiation skills. Proven ability to lead cross‑functional teams and influence stakeholders at all levels. Excellent communication skills, capable of translating complex security concepts into understandable language for non‑technical audiences. Fluent in English (verbal and written). Proven ability to lead, mentor, and develop a team, fostering a culture of continuous learning and high performance. Experience with coaching and performance management, including establishing measurable goals, providing constructive feedback. Strategic thinker with a proactive approach to identifying risks and implementing mitigation strategies. Personal Qualities High integrity and professionalism, with a strong sense of accountability. Curiosity and continuous learning mindset to stay ahead of emerging threats. Resilience and adaptability in a dynamic security environment. Communication Skills : Clear, concise communicator capable of translating technical concepts for non‑technical audiences and executive reporting. Ability to work in a multicultural environment with stakeholders in several countries. Ability to foster a security‑conscious culture across the organization. Your career with us Working at Technip Energies is an inspiring journey, filled with groundbreaking projects and dynamic collaborations. Surrounded by diverse and talented individuals, you will feel welcomed, respected, and engaged. Enjoy a safe, caring environment where you can spark new ideas, reimagine the future, and lead change. As your career grows, you will benefit from learning opportunities at University, such as The Future Ready Program, Graduate Program, and from the support of your manager through check‑in moments like the Mid‑Year Development Review, fostering continuous growth and development. What’s Next? Once receiving your system application, our recruiting team will screen and match your skills, experience, and potential team fit against the role requirements. We ask for your patience as the team completes the volume of applications with reasonable timeframe. Check your application progress periodically via personal