Expert Operational Cybersecurity & Resilience Senior

Project overview

As part of strengthening its activities, CYNERS is looking for a Senior Operational Cybersecurity & Resilience Expert (M/F) to support a major player in the energy sector in securing its information systems and strengthening its operational resilience.

Integrated into a Cybersecurity Division, you will be involved in strategic issues of cyber resilience, crisis management, business continuity, and technical risk analysis.

You will collaborate closely with the Digital, Infrastructure, Business, and cybersecurity expert teams to strengthen the organization's ability to anticipate, resist, and react to cyber threats.

Your main missions:

Expected deliverables:

Profile sought

You have 8 to 10 years of experience in cybersecurity, with proven expertise in operational resilience, Cyber/IT crisis management, and technical risk analysis.

You have worked in complex IT environments and understand the interactions between infrastructure, applications, business processes, and security requirements.

Essential skills:

Expected technical expertise:

Certifications:

You have excellent analytical, synthesis, and communication skills. Autonomous, pragmatic, and proactive, you can interact with both technical teams and management.

Professional English required, both written and spoken.

Work environment

You will join a Cybersecurity Division within a large group in the energy sector, in a complex, cross-functional, and transforming technical environment.

You will work in interaction with the Digital, Infrastructure, Business teams, Group cybersecurity experts, as well as partners and suppliers.

The mission covers operational resilience, Cyber/IT crisis management, critical asset protection, and securing new technologies, particularly artificial intelligence.

• Cyber resilience and business continuity
• Participate in Critical Asset Resilience (CAR) programs.
• Identify critical assets and analyze their technical and business dependencies.
• Perform and maintain application and technical mappings.
• Contribute to defining Business Workarounds.
• Support resilience and business continuity validation exercises.
• Identify resilience risks and propose remediation plans.
• Cyber and IT Crisis Management
• Maintain and improve crisis management systems.
• Draft and update procedures, operational guides, and quick reference guides.
• Prepare, organize, and lead cyber crisis exercises.
• Support teams during major exercises or real crises.
• Conduct lessons learned (REX) and follow up on improvement plans.
• Technical risk analysis and architecture security
• Perform technical cybersecurity risk analyses.
• Participate in application, Cloud, and infrastructure architecture reviews.
• Identify threat scenarios and their operational impacts.
• Challenge technical choices and propose risk reduction measures.
• Support transformation projects with a Secure by Design approach.
• Cyber innovation and new technologies
• Monitor new cybersecurity threats and technologies.
• Evaluate innovative solutions related to AI security, data protection, and security posture management.
• Contribute to discussions around AISPM, DSPM, Shadow IT / Shadow AI, and security control automation.
• Technical cybersecurity risk analyses.
• Mappings of critical assets and their dependencies.
• Resilience improvement plans and business continuity arrangements.
• Crisis exercise reports, lessons learned, and remediation plans.
• Security reviews and technical recommendations.
• Decision support materials for the IT department and cybersecurity managers.
• Significant experience in Cyber and/or IT crisis management.
• Mastery of operational resilience, BCP, and business continuity issues.
• Ability to perform technical cybersecurity risk analyses.
• In-depth understanding of complex IT architectures and business processes.
• Experience with security reviews and supporting technical projects.
• Knowledge of ISO 27001, ISO 27005, ISO 27035, NIST CSF, and EBIOS RM frameworks.
• Cloud architectures (AWS, Azure, GCP) and infrastructures.
• IAM, PAM, MFA, Active Directory, and identity federation.
• PKI, encryption, API security, and network protocols.
• Vulnerability management and Secure by Design.
• Knowledge of AI security challenges and new cyber technologies.
• CISSP or CISM sought.
• EBIOS RM, ISO 27001, ISO 27005, or ISO 22301 certifications appreciated.

Project details

La Garenne-Colombes (92).

Organization: Full-time, up to 3 days of teleworking per week, with a possible evolution to 2 days.

Envisaged start date: November 23, 2026.

12 months renewable, up to 3 years.

• Start: ASAP
• Duration: 3 ans
• Remote: hybrid
• Location: Île-de-France, France, FR
• Languages: French