Head of Lottery Cybersecurity
Within the framework of a replacement, FDJ United is recruiting its future Head of Lottery Cybersecurity.
Reporting to the Group Cybersecurity Director, the mission is to ensure the security of the information systems of the France and International Lottery business units by deploying and implementing cybersecurity and cyber-resilience strategies within their perimeter, in compliance with the FDJ United Group's cybersecurity framework.
The mission also includes providing cybersecurity support for B2B activities and managing cybersecurity governance for subsidiaries attached to these business units, in France and internationally.
Finally, the role requires ensuring the compliance of these business units with applicable norms and standards, such as ISO 27001, WLA SCS, ANJ, and PCI DSS.
- Ensure the implementation of cybersecurity and cyber-resilience strategies up to the operational level, notably through the development of the annual roadmap for its perimeter, in conjunction with the Group Cybersecurity Office.
- Ensure the governance of information system security within its perimeter, relying on the Information Security Management System (ISMS).
- Oversee the cybersecurity of the Lottery business unit subsidiaries.
- Guarantee the management and control of risks at the appropriate level and ensure the implementation of technical and organisational security measures to achieve security objectives.
- Lead action and remediation plans resulting from risk treatment plans and audits.
- Provide cybersecurity support for systems and applications, from the design phase through to operation, in collaboration with business and IT stakeholders.
- Guarantee the renewal of required certifications, authorisations, and accreditations for this perimeter (ISO 27001, WLA SCS, ANJ, PCI DSS).
- Evaluate the security level and compliance with the Group's cybersecurity framework requirements, particularly through the execution of the internal SSI audit programme and the permanent control plan.
- Manage the organisation and budget of the Lottery Cybersecurity department.
- Evaluate and monitor the cybersecurity posture of third parties within its perimeter in alignment with the Group's cybersecurity strategy.
- Ensure effective supervision of the security of its perimeter by providing the Group CyberSOC with the necessary prerequisites and requirements.
- Manage security incidents and crises within its perimeter, with the support of Group cybersecurity and IT teams when required, and contribute to the Group's crisis management procedures.
- Produce cybersecurity dashboards to ensure clear communication with the IT and business teams of the Lottery business units.
- Initial training in IT or information systems security (required).
- Over 10 years of experience in organisational and/or operational information systems security (required).
- Bac+5 degree with a specialisation in IT or information systems security and over 10 years of experience in organisational and operational IS security (required).
- Mastery of cybersecurity fundamentals and knowledge of industry standards such as ISO 27001, ISO 27002, and NIST CSF (required).
- Cybersecurity certifications such as CISSP, ISO 27001 Lead Implementer (preferred).
- Solid technical culture: networks, systems, applications, architecture, infrastructure, security devices (required).
- Good knowledge of information security solutions, methods, procedures, and best practices, as well as SSI risk management (ISO 27005, EBIOS Risk Manager) (required).
- Legal knowledge regarding IT law related to information system security and data protection (required).
- Knowledge of crisis management (required).
- Fluent English (required).
- Interpersonal intelligence, ability to create and develop a network are essential (required).
- Influence and leadership capabilities (required).
- Good writing and communication skills, with the ability to be pedagogical (required).
- Learning and development opportunities
- Social events and activities
- Inclusion networks
- Employee Assistance Programme
- Private medical insurance
- Long service awards
- Pension
FDJ United is one of Europe's largest gaming and betting groups, formed after French lottery operator La Française des Jeux (FDJ) acquired Kindred Group - the company behind Unibet - in 2024 and rebranded the enlarged group in 2025. Headquartered in Boulogne-Billancourt, France, it operates lottery, online sports betting, casino and poker across multiple European markets and Australia. Its portfolio includes well-known online brands such as Unibet, 32Red and Maria Casino, alongside FDJ's French lottery and retail network. The group is listed on the Euronext Paris exchange.