1 day ago

IT & Information Security Manager Cureety

Solutions de suivi à distance pour patients atteints de cancer.

Apply

Permanent

Paris

A few days home

Salary: Not specified

> 5 years

1 day ago

Skills we're looking for

Cybersecurity knowledge

Risk management

Information Security Management (ISM)

Cloud security

Leadership

You'll be part of

120 employees

Mobile Apps

Software

Health

Average age: 37

Founded in 2018

43%

57%

Les soins en oncologie ne s’arrêtent pas à la sortie de l’hôpital. L’accompagnement des patients non plus.

Depuis 2018, Cureety développe des solutions pour suivre à distance les patients atteints de cancer, détecter plus tôt les complications et aider les équipes soignantes à intervenir au bon moment.

Aujourd’hui, Cureety accompagne 100 000 patients et travaille avec 250 centres de cancérologie dans 5 pays. Nous contribuons également à la recherche clinique pour mieux comprendre les traitements et leurs effets dans la vie quotidienne des patients.

Présents en Europe et aux États-Unis, nous réunissons nos expertises pour accompagner davantage de patients et d’équipes soignantes.

Notre mission : rendre les soins en oncologie plus accessibles, mieux coordonnés et plus proches du quotidien des patients. C’est ce que nous construisons chaque jour aux côtés des professionnels de santé.

You'll be working on

At Cureety, we develop digital solutions that support people living with cancer and help healthcare teams monitor patients throughout their care journey.

As we expand across Europe following our acquisition of Reimagine Care in the United States, we are looking for an IT & Information Security Manager to lead our information security program and oversee our outsourced internal IT.

Your challenge: anticipate the risks that come with growth, strengthen security in everyday operations, and establish shared practices across our European and US activities. You will build on an existing ISO 27001-certified Information Security Management System (ISMS).

We are looking for someone who can deliver today and grow with the organization, with the potential to take on broader global CIO/CISO responsibilities over time.

Your role

Working directly with executive leadership, you will own the information security program and drive its implementation with our teams.

You will partner closely with the CTO, in a role separate from technical leadership. Our external IT provider handles day-to-day internal IT support and operations.

Your main responsibilities:

Lead security and risk management: identify key risks, define the roadmap and drive risk treatment plans through remediation or escalation for decisions on residual risk.
Strengthen operational security: agree appropriate protections for our cloud and SaaS environments with the CTO, coordinate security testing and verify that remediation is effective.
Prepare for incidents and ensure resilience: lead incident preparedness and response coordination, bring the right people together and organize security and business continuity exercises.
Embed security into everyday work: maintain and improve the ISMS, develop security awareness and help teams adopt practices suited to their work.
Oversee internal IT and third parties: manage our IT provider, strengthen oversight of devices, tools and access, assess supplier security and support new integrations.
Demonstrate the effectiveness of our security program: maintain ISO 27001 certification, coordinate SOC 2 readiness and the implementation of HIPAA requirements for our US activities, and lead audits and responses to customer and partner security requests.

You will work closely with Legal, Privacy and Quality to protect the sensitive data we handle. You will give leadership a clear view of risks, progress and decisions requiring their attention.

We're looking for

You have already led an information security program and delivered measurable improvements to an organization’s security. You can move from assessing a risk to working through its resolution with technical teams.

You bring:

Solid experience in security risk management and delivering security improvements.
The technical understanding to challenge security controls across cloud infrastructure, identities, access and data protection.
Strong working knowledge of ISO 27001 and information security management systems.
The ability to manage partners and bring technical and business teams together.
At least one relevant certification: CISM, CISSP, ISO 27001 Lead Implementer / Lead Auditor, or an equivalent credential.
Fluent professional English, both spoken and written.

Experience with SOC 2 and/or HIPAA, outsourced IT providers, or SaaS, healthcare or medical device environments would be an advantage.

You can prioritize, make a clear case for your recommendations and propose measures proportionate to the risks. You enjoy building structure while staying directly involved in solving practical problems with teams.

You are interested in developing a broader global leadership remit across information security and corporate IT as Cureety grows.

Why join Cureety?

Meaningful ownership of security, with direct access to executive leadership.
An international program to shape, working with European and US teams during a key period of integration and growth.
Room to grow your responsibilities, combining security leadership with oversight of corporate IT.
A tangible purpose: protecting the data and services used by patients and healthcare professionals.