Ce job n'est plus disponible.
Chief Information Security Officer Zama
Confidentiality protocol for on-chain finance using Fully Homomorphic Encryption.
CDI
Paris
Télétravail total
Salaire : non spécifié
> 5 ans
Votre nouvelle entreprise
Blockchain
Cyber Security
Créée en 2020
Zama is the fastest-growing confidentiality protocol for on-chain finance.
By leveraging Fully Homomorphic Encryption (FHE), it enables digital assets to be issued, managed, and traded privately on existing public blockchains such as Ethereum and Solana.
Founded by FHE pioneer Dr. Pascal Paillier and entrepreneur Dr. Rand Hindi, Zama brings together one of the world’s largest teams of FHE researchers and engineers and supports a global ecosystem of developers building confidential applications. zama.org
Vos missions au quotidien
Zama is looking for a seasoned Chief Information Security Officer to lead the security function as our technology moves from early adoption to usage at scale in production and safeguards real economic value. As our Zama Protocol powers confidential smart contracts that custody millions in assets, and as we bring on enterprise customers in regulated industries, the CISO will be the executive accountable for ensuring Zama itself is worthy of that trust.
Reporting directly to the CEO and leading an existing and growing security team, you will own the strategy, posture, and maturity of Zama’s information security program end-to-end, from internal systems and cloud infrastructure to the engineering practices that ship cryptographic software to power the financial on-chain ecosystem.
You will:
Security Strategy: Define and drive Zama’s information security strategy, setting priorities that reflect the realities of protecting a cryptography company whose outputs secure high-value on-chain systems.
Program Leadership: Lead, mentor, and grow the existing security team, establishing a function that scales with Zama’s headcount, customer base, and threat surface.
Compliance & Certifications: Own Zama’s work towards SOC 2, ISO 27001, and other certifications required by our enterprise and regulated customers, owning the roadmap from gap analysis through audit.
Enterprise Readiness: Serve as the executive face of security for prospective customers, partners, and auditors, particularly financial institutions and regulated entities evaluating Zama’s technology for production use.
Corporate Security: Harden Zama’s internal environment, covering identity and access management, endpoint and cloud security, secrets management, CI/CD integrity, vendor risk, AI risks, and insider threat.
Incident Response: Build and rehearse incident response playbooks, ensuring Zama can detect, contain, and communicate clearly in the event of a security incident.
Trend Analysis: Stay abreast of the evolving threat landscape for cryptography companies, blockchain infrastructure, and high-value digital asset custody, adapting the program accordingly.
Ce que l’on cherche
Proven track record as a CISO, Head of Security, or equivalent senior security leader at a company safeguarding hundreds of millions in assets, ideally gained in the blockchain, crypto, or digital asset custody space (exchanges, custodians, L1/L2 protocols, stablecoin issuers, or institutional DeFi).
Strong skill set in blockchain, securing funds, and monitoring and incident response
Deep understanding of the threat models unique to high-value blockchain systems: key management at scale, signing infrastructure, smart contract exploitation, social engineering of privileged personnel, and supply chain attacks on cryptographic software.
Demonstrable experience taking a security program through SOC 2, ISO 27001, or equivalent certification cycles, including scoping, remediation, and sustained compliance.
Strong background in cloud security (AWS/GCP), identity and access management, and the security of modern software development pipelines.
Experience building and leading high-performing security teams.
Exceptional communication skills, with the ability to speak credibly to engineers, executives, boards, auditors, and enterprise customers alike.
Understanding of, or willingness to learn about, FHE, ZK, and MPC, to the level required to create strong security practices.
A pragmatic, builder’s mindset: comfortable shaping strategy, but equally willing to get into the details when the situation calls for it.
Avantages
Nos étapes de recrutement
📋 Step 1: The Application Form
Start your journey by filling out our application form. This is your chance to introduce yourself and showcase your unique skills and experiences.
🏆 Step 2: The Challenge
Next up, tackle our challenge! This is where you can shine and show us how you approach and solve real-world problems.
💼 Step 3: The Technical Interview
Dive deep into your technical knowledge with our team. This is your opportunity to demonstrate your expertise and passion for the field.
🤝 Step 4: Cultural Fit & Compensation Chat
Meet with our COO to discuss our company culture and explore how you can thrive with us. We’ll also discuss compensation to ensure we’re on the same page.
🛠️ Step 5: The Hacking Trial
Put your skills to the test in a real-world hacking scenario. This trial helps us see your practical skills in action and how you handle challenges.
🔍 Step 6: The Reference Check & Offer
As a final step, we’ll conduct a reference check to confirm your qualifications and past experiences. If all goes well, you will get an offer soon.
We provide more details on our process here. Exceptional candidates will hear from us as we advance through the recruitment process.
Zama values and promotes diversity. We give everyone a fair chance to be evaluated on their professional, academic, and personal skills. Our goal is to make the hiring process as pleasant, stress-free, and friendly as possible, even if it is longer and more involved than you might find elsewhere.
