Expert EBIOS - M/F

Project overview

#StormYourCareer Join STORM GROUP and grow with us!

Analyze and manage the Cyber risks of a banking sector giant:

As part of strengthening second-line of defense (2LoD) measures and the secure integration of new entities within a large international banking group, we are looking for an EBIOS RM Security & Risk Analysis Expert. Within the Transverse Processes Operations Center (OPT) of the group's Security Department, your role will be strategic and high-value: you will ensure cyber risk analysis on new IT projects and support the operational implementation of security processes for a rapidly growing subsidiary perimeter (particularly equipment financing solutions).

Your Future Environment

You will work within the operational security process implementation and management department (DMOP). In close collaboration with the risk control function (CTRM), IT project managers, production teams, and group subsidiaries, you will operate in a demanding environment covering all regulatory risk taxonomies (Cyber, IT Development/Projects, Production, Governance, Business Continuity Planning). This is the ideal environment to showcase your mastery of risk analysis methodologies (EBIOS RM / ISO 27005), promote Security by Design, and lead large-scale security integration projects.

Your Key Missions

Risk Analysis & Second Line of Defense (RISK ANALYSIS & GOVERNANCE Mode):

Security Integration & Project Management (SECURITY BY DESIGN & BANKING Mode):

• Conduct IT and cybersecurity risk analysis (EBIOS RM / ISO 27005 method) for all new IT projects within the scope.
• Accurately assess threats, vulnerabilities, and business impact of technological projects to feed and inform the risk control function (CTRM).
• Ensure the compliance of architectures and projects with banking regulations and second-line of defense requirements.
• Formulate appropriate, pragmatic, and business-oriented security recommendations.
• Implement the security integration process in projects for a newly integrated equipment financing subsidiary.
• Support business and technical teams in adopting group security standards and understanding their cyber challenges.
• Manage projects related to the deployment and monitoring of transverse security processes (governance, IT production, IT disaster recovery plan).
• Develop and lead awareness and conviction initiatives with key stakeholders.

Requirements

Your Strengths

Our Benefits

5 Reasons to Join Us

Our Selection Process

Ready to join a team of committed experts? Don't hesitate, join the Storm Team!

Storm Group encourages an inclusive and multicultural culture where diversity of profiles fuels our collective intelligence. By joining the Storm Team, you become part of a committed ecosystem that places the development of your talents at the heart of its strategy, while actively contributing to solidarity and reducing environmental impact, both within our offices and in the large-scale projects we undertake for our clients.

Work Environment

Storm Group is a consulting firm specializing in the transformation of Information Systems and Organizations. We support our clients across the entire IT value chain, from expert sourcing to strategic consulting and software engineering.

Our clientele primarily consists of major players in banking, insurance, and finance, for whom we mobilize rigorously selected consultants for their most strategic projects.

• Education: Engineering degree or Master's degree (Bac+5) in cybersecurity, IT risk management, or information system security.
• Experience: You have 4 to 8 years of confirmed experience in cyber risk management, project security, or IT audit within a large enterprise environment (ideally banking or finance).
• Imperative Technical & Methodological Expertise:
• Proven mastery of EBIOS RM and/or ISO 27005 risk analysis methodologies. An EBIOS RM or ISO 27005 certification is a highly valued asset.
• Excellent understanding of IT risks and challenges (development, infrastructure, cloud, production, BCP/DRP).
• Knowledge of security governance frameworks and the second line of defense (2LoD).
• Skills in transverse project management and execution.
• Operational Constraints & Languages:
• Fluent English is essential (written and spoken) for communication with international entities or partners.
• Teaching & Persuasion Skills: Natural talent for making security issues understood and accepted by diverse profiles (business, project managers, management).
• High Autonomy & Critical Thinking: Ability to conduct rigorous risk analyses independently and synthesize complex subjects.
• Rigor & Regulatory Alignment: Attention to detail to assess compliance with banking sector regulatory risk taxonomies.
• 75% reimbursement of public transport costs.
• Restaurant tickets subsidized by STORM GROUP at 50% (€10.5 / day).
• Access to Gymlib / Wellpass (sports and well-being).
• Health / Provident Fund plan with Alan.
• Continuous training: Access to Udemy Business and support for Security / Risk Management certifications (EBIOS RM, ISO 27005, CISA, CRISC).
• Co-optation bonus, profit-sharing, and participation bonuses.
• Work rhythm: Partial remote work and presence at the client site (Île-de-France).
• Tailored Career Path: Co-create a unique professional trajectory adapted to your ambitions.
• Strategic Missions: Work on large-scale projects, perfectly aligned with your expertise.
• Dedicated Support: Benefit from structured annual reviews to ensure your continuous progress.
• Continuous Excellence: Develop your skills daily within a demanding ecosystem.
• Sustainable Performance: Thrive in an environment where business demands respect your work-life balance.
• Introductory call with a recruiter.
• Technical interview with in-depth technical assessment (Practical exercise on EBIOS RM risk analysis, practical case of integrating security into an IT project, and oral presentation in English).
• Final meeting to validate fit and project outlook.

Project details

• Start: ASAP
• Duration: 1 mois
• Remote: hybrid
• Location: 75002, Paris, Île-de-France, FR
• Languages: French