Geforderte Skills
- Cybersecurity
- Vendor Risk Management (VRM)
- Third-Party Risk Management (TPRM)
- Governance, Risk, and Compliance (GRC)
- Security Assessment
- Due Diligence
- Risk Mitigation
- Cloud Security
- AWS
- Azure
- GCP
- English
Sprachen: French
Jobbeschreibung
Seeking a Senior Cybersecurity Consultant with expertise in Vendor Risk Management for a large international group in Paris. The role involves assessing supplier security risks, ensuring quality of evaluations, and supporting governance decisions in an English-speaking international environment.
Project overview
The mission is part of the cybersecurity team of a large international group and focuses on the governance of security risks related to suppliers, projects, and solutions used by the group. The main challenge is to assess the risks associated with third parties, control the quality of security and operational risk assessments, and support governance bodies in their decisions. The consultant works in an international English-speaking environment, coordinating with procurement, risk, security, and architecture teams.
Missions:
Expected Profile:
Senior cybersecurity consultant with 8 to 15 years of experience, with proven expertise in risk governance and supplier security assessment. Significant experience within a large international group or a consulting firm, as well as experience with supplier validation processes and security audits, is sought. The candidate must master VRM, TPRM, and GRC approaches, understand AWS, Azure, or GCP cloud environments, and possess excellent written English skills. CISSP, CISM, ISO 27001 Lead Auditor, ISO 27005, GIAC, MBCI, or DRII certifications are appreciated.
- Conduct security assessments and due diligence of suppliers
- Assess cybersecurity risks associated with suppliers, projects, and products
- Control the quality of information security and operational risk assessments
- Prepare files and materials for risk review committees
- Identify security risks and formulate mitigation recommendations
- Define and monitor remediation plans for identified risks
- Produce supplier risk assessment reports and security due diligence reports
- Formalize risk analyses and recommendations for business and technical stakeholders
- Maintain risk registers related to projects, products, and suppliers
- Challenge supplier architectures on cloud security aspects
- Contribute to vendor risk governance and validation processes
- Coordinate exchanges with procurement, risk, security, and architecture teams
- Prepare necessary elements for security audits and internal controls
Project details
- Start: ASAP
- Duration: 10 mois
- Location: Paris, France, FR
- Rate: 25-56 EUR/h
- Languages: French
Indexiert von der 9am-Meta-Suche. Du bist Job-Anbieter? Listing beanspruchen oder verwalten
Gefunden auf free-work.com