Chief Information Security Officer (CISO)

Chief Information Security Officer (CISO)

Remanence is pioneering the next era of enterprise AI by building intelligent systems that learn continuously from real-world execution. We transform complex enterprise workflows and business context into dynamic, interactive environments where AI agents can safely learn, adapt, and improve. By combining high-fidelity simulation environments with state-of-the-art training loops, we build specialized models that solve long-horizon, complex tasks with unmatched reliability. We're building the most talent-dense AI team in Europe to make this happen.

You'll own security and compliance across the company and the product. Our customers operate in regulated industries, often deploying on their own infrastructure. Your job is to build a practical security program, earn the certifications they expect, and help them deploy Remanence with confidence. This is a hands-on role.

What you'll work on

• Build our security program and lead ISO 27001 certification and SOC 2 Type II audits, expanding to additional frameworks as needed.

• Manage compliance requirements, including GDPR and the EU AI Act, alongside sector-specific customer expectations.

• Work with Platform and Infrastructure teams on secure development, deployment architectures, vulnerability management and penetration testing.

• Protect customer data, model weights and training trajectories through isolation, encryption and access controls. Address AI-specific risks such as prompt injection and data leakage.

• Lead customer security reviews, questionnaires and audits, helping unblock enterprise deployments.

• Own incident response and business continuity, and occasionally support internal IT security, including identity, device management and employee access.

Relevant frameworks and technologies

• Core certifications: ISO 27001 and SOC 2 Type II. You must have led at least one certification or audit end to end.

• Additional frameworks: Experience with AI, privacy or sector-specific standards such as ISO 42001, ISO 27701, SecNumCloud or HDS is a plus.

• Regulation: Familiarity with GDPR and the EU AI Act, alongside requirements relevant to regulated customers, such as DORA and NIS2.

• Security tooling: Compliance automation and monitoring tools such as Vanta, Drata and SIEM platforms.

• Infrastructure and IT: Kubernetes and cloud security, secrets and key management, identity providers and device management.

About you

You've built security programs at growing software companies and led at least one ISO 27001 certification or SOC 2 audit end to end .
You're comfortable reviewing cloud infrastructure, Kubernetes deployments and infrastructure-as-code. You can turn security requirements into practical engineering controls and explain risk clearly to engineers, customer security teams and procurement.
We welcome experienced security leaders and hands-on engineers ready to step up. Experience with regulated customers, on-prem or BYOC deployments, and compliance automation tools such as Vanta or Drata is valuable.

What we offer

• Competitive compensation and equity.

• A fast-paced environment combining frontier research with impactful real-world applications.

• Visa sponsorship and relocation support for candidates joining us in Paris or London.

• A flexible hybrid setup, with a preference for working together in person.