Senior Information Security Officer

As a Senior Information Security Officer, you are the strategic leader who defines, drives and strengthens Luminus’ cybersecurity vision across the entire organization. You ensure that our IT, OT, business operations, subsidiaries and affiliates are protected against evolving cyber threats while supporting our mission to deliver reliable and secure energy services to millions of customers.

What you'll do

• You define and implement a company-wide cybersecurity strategy aligned with Luminus’ business objectives, risk appetite and regulatory requirements.
• Identify, assess, prioritize and report cybersecurity risks to executive leadership and governance bodies, while ensuring compliance with regulations such as NIS, GDPR and other applicable cybersecurity frameworks.
• You develop and maintain security policies, standards and governance frameworks, and ensure their effective adoption across the organization, subsidiaries and affiliates.
• Build and manage the cybersecurity roadmap, driving initiatives that strengthen resilience, compliance and operational efficiency while building on the strong foundations already in place.
• You work closely with IT, OT, business leaders, the Data Protection Officer, security operations teams and the Information Security Forum to integrate security into key activities and create alignment across the organization.
• Represent Luminus towards regulators, authorities, auditors and external partners, while chairing the Information Security Forum and influencing stakeholders at all levels of the organization.

What you'll bring

• You have at least 8 years of experience in information security, including a minimum of 5 years in a leadership role.
• Extensive expertise in cybersecurity governance, risk management, security technologies, regulatory compliance and the ability to translate security requirements into business value.
• You communicate confidently with both technical and non-technical stakeholders and can clearly explain security risks, priorities and recommendations to senior management, directors and subsidiary leaders.
• Strong influencing, organizational and prioritization skills, allowing you to build consensus, challenge stakeholders when needed and drive security improvements across a complex organization.
• You hold a relevant master's degree or have acquired equivalent expertise through professional experience.
• Recognized certifications such as CISSP, CISM and ISO 27001 Lead Implementer are required. A good understanding of IT and OT environments, risk management and the energy sector is a strong asset. Fluent English and French are required.