> Markdown version of [/jobs/ext/1165878-ciso-data-ai](https://www.wearedevelopers.com/jobs/ext/1165878-ciso-data-ai). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# CISO Data & AI

- **Company:** ArcelorMittal
- **Location:** Maizières-lès-Metz, France
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Artificial Intelligence, Microsoft Azure, Cloud Computing, Multi-Factor Authentication, Identity and Access Management, Systems Development Life Cycle, Mitre Att&ck, SentinelOne Expertise, Devsecops
- **Published:** July 3, 2026
- **Apply:** https://emfg.fa.em4.oraclecloud.com/hcmUI/CandidateExperience/en/sites/CX_1001/requisitions/preview/38792

## About the Role

* Master's degree in an IT-related field.
 * Proven CISO-level expertise securing R&D environments, including IP, data, AI/ML, DevSecOps, cloud platforms, and laboratories.
 * Strong experience in cybersecurity strategy, governance, risk management, audit leadership, and crisis management., * Security frameworks: ISO 27001, NIST CSF, FAIR, MITRE ATT&CK.
 * Technologies: Azure, Microsoft 365, Entra ID, SentinelOne, Darktrace, Varonis, Purview, PingCastle.
 * Compliance and crisis management: GDPR, NIS2, AI Act, incident response, and audit programs.
 * Relevant certifications such as CISSP, CISM, ISO 27001 LI/LA, or CCSP.
 * Strong understanding of AI security, including secure GenAI usage, data protection, and model governance.

Personal Skills

 * Clear, structured, and evidence-driven communicator.
 * Comfortable operating in a global and highly collaborative environment.
 * Fluent in English and French., * You are respectful, transparent, honest, and empathetic in your relationships. You honor your word and your commitments to others.
 * You agree to behave consistently with the highest level of integrity.
 * You strive to question your practices. with high expectations of yourself and others, you strive for a high level of quality and reliability in everything you do.
 * You recognize that diversity, varied skills, and fresh ideas make a group exponentially better in the pursuit of a common goal.
 * You know that learning changes minds and lives, so you are committed to learning throughout your professional career and continually achieving the skills required and essential to your success.
 * You are open to ideas that challenge conventions and stimulate innovation.

## Description

* Security Strategy & Governance: Security roadmaps, secure-by-design practices, and enterprise security programs.
 * IP & Engineering Security: IP protection, Secure SDLC, DevSecOps, supply-chain security, and AI/ML governance.
 * Cloud & Lab Security: Segmentation, identity management, MFA, encryption, and monitoring.
 * Audit & Compliance: Leading audits and ensuring regulatory readiness.
 * Incident & Risk Management: Structured risk governance and coordination with Group Security teams.
 * Stakeholder Engagement: Strong collaboration with IT, Legal/IP, external partners, and Security Champions networks.


## Related Videos

- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Developer Tools for Microsoft Azure](https://www.wearedevelopers.com/videos/450-developer-tools-for-microsoft-azure)
- [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines)
- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)
- [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies)
- [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops)

## Related Articles

- [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production)
- [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)