Head of Security & Infrastructure

PlayPlay is the video creation platform that enables marketing and communication teams to turn any message into a memorable video.

Since 2017, PlayPlay has been growing exponentially:

- 2500+ large and mid-sized companies across the globe (including two-thirds of the CAC40)

- 230+ employees in Paris, New York and Berlin;

- 65 M$ raised (series A and B);

- Member of the French Tech 120 and recently ranked #26 in the Top100 rising B2B Scale-up in Europe by Sifted!

PlayPlay is the company for you if you want to: 

- Join a hyper-growth scale-up that allows you to invest in multiple projects and benefit from rapid evolution opportunities 🌱

 - Work on a product loved by our customers (68+ NPS) and in constant improvement 🚀

 - Learn from great colleagues in a positive work environment that thrives on ambition, drive, humility, transparency, and teamwork (our 4.6/5 rating on Glassdoor is proof of that!) 🤗

 - Enjoy activities organized by the Happiness team (Music Quizzes, concerts, seminars, etc.) 🎉

 - Work in a hybrid model remote/office and have additional four weeks of full-remote per year (overseas is allowed in any country with a time difference of 3 hours or less) 🖥️

We are backed by investors such as Insight Partners (HubSpot, Twitter), Balderton (Revolut, Aircall) and Point9 (Loom, Zendesk) who are helping us become the global leader in video creation. And to achieve this, we are looking for the best talent in the market!

Read more about "The 100 good reasons to join PlayPlay":

In French https://bit.ly/43LcIIw 

In English https://bit.ly/3O88yBO

In German https://bit.ly/3Qqt0Q5 

At PlayPlay, we empower teams to create powerful story telling via video at scale. Operating in a B2B environment with enterprise clients who demand the highest security standards, we handle sensitive brand assets and data that require enterprise-grade protection. We're seeking a security-first leader to elevate our security posture while managing our infrastructure foundation.

Reporting to the CTO, you'll lead our Security and Infrastructure teams (4-5 engineers), with a primary focus on building a world-class security organization. You'll be responsible for our overall security strategy, governance framework, and risk management program while ensuring our infrastructure supports these security requirements.

Your Role: Impact, Ownership, Innovation

As Head of Security and Infrastructure, you will:

Security Leadership - 70% of focus

Security Strategy & Governance

• Maintain and improve our comprehensive security governance framework aligned with industry standards such as the ISO 27001

• Develop and maintain security policies, standards, and procedures

• Lead security awareness and training programs across the organization

• Drive the security certification roadmap - SOC 2, ISO 27001

• Define and track security metrics and KPIs

Risk Management & Compliance

• Maintain an enterprise-wide security risk management framework

• Lead threat modeling and risk assessments for new features and architectures

• Ensure compliance with data protection regulations (GDPR, CCPA) and participate to Data Privacy group

• Partner with Legal on security and privacy compliance matters

Security Operations & Monitoring

• Design and implement a Security monitoring strategy

• Establish security detection rules and alerting

• Oversee vulnerability management and bug bounty programs

• Lead security incident response

Security Business Partner

• Lead security discussions with enterprise clients including security aspects of client contracts and security questionnaires

• Build relationships with client security teams

Infrastructure Leadership - 30% of focus

Cloud & Infrastructure

• Leverage DevOps expertise to design a secure cloud infrastructure following zero-trust principles

• Implement infrastructure security controls and monitoring

• Oversee identity and access management (IAM) strategy

Infrastructure Operations

• Guide infrastructure automation and IaC practices

• Oversee disaster recovery and business continuity planning

• Optimize infrastructure costs while maintaining security requirements

Senior Technical leadership

• Lead, mentor, and support growth of your engineers

• Shape the Roadmap: Collaborate with Tech Leads to design, propose, and execute an 18-month strategic roadmaps for security and infrastructure initiatives

• Collaborate with other engineering leaders to align infrastructure capabilities with product needs

• Bugdet: Own the infrastructure and security budgets, making strategic decisions about tooling and resources

• Nurture a Positive Environment: Build a cohesive, collaborative, and positive team culture where everyone feels valued, supported, and empowered to excel.

What We’re Looking For:

• 5+ years of experience in security and infrastructure engineering including 2+ years of engineering management

• Security - Solid knowledge of Security frameworks (ISO 27001, , EBIOS-RM), Risk management methodologies & Security Governance routines, Cloud security best practices, Compliance frameworks (GDPR), Security tools and technologies (SIEM, EDR, WAF)

• Knowledge of Infrastructure as Code, Container security, Network security, API security, CI/CD security integration

• Solid communication skills and ability to explain complex technical concepts in both english and french

You’ll Stand Out If:

• You have a solid knowledge of security & technical culture regarding infrastructure including CISSP, CISM, or equivalent security certifications and a background in B2B SaaS security

• You’re passionate about mentoring and growing engineering talent, from junior engineers to staff engineers.

• You’re great at communicating complex topics to any audience - Executives, Clients, Engineers, Sales…

• You have experience with large-scale cloud-based infrastructure and security policies at big corporates.

• You’re hands-on when needed, balancing leadership with technical insight.

OUR VALUES

Creative: We don't do things the same way as others and we like that. It's that madness that gives everyone the freedom to innovate and follow through with their ideas.

User-first: Our customers are at the heart of everything we do because a product is nothing without its users and it is with its users that a product grows.

United: What motivates us is to succeed together. We are specialists in cross-team projects: it is by sharing our expertise and supporting each other that we achieve our goals.

Ambitious: We are not afraid to move fast and take risks. If plan A doesn't work, there are still all the letters in the alphabet. We learn from our experiences and adapt.

Committed: We take ownership of our projects, with responsibility. We are demanding of others but above all, we give our best.

DIVERSITY & INCLUSION

At PlayPlay, we're committed to fostering an environment where diversity and inclusion are at the heart of our values. Our goal is to attract and build a diverse, equal and inclusive team, where everyone feels welcome.

As an equal opportunities employer we make sure the application process and our workplace is for everyone.