RSSI Modern Workplace / Security Officer Senior (H/F) – Freelance

Project overview

Mission Context

We are looking for an experienced Modern Workplace CISO to support the strengthening of governance and cybersecurity posture within a complex and international IT environment.

The mission focuses on securing digital work environments, particularly workstations, Microsoft 365, ITSM tools, and associated IT services.

We are looking for a profile with dual expertise in governance, risk, and compliance (GRC) and Modern Workplace environment security, capable of collaborating with technical teams, cybersecurity managers, and external providers.

Missions and Responsibilities

Governance and Risk Management

Modern Workplace Environment Security

Supplier and Provider Management

Incident Management and Cross-functional Coordination

Management and Reporting

Expected Deliverables

Ideal Profile

We are looking for a professional capable of managing the security of a Modern Workplace environment from end to end, combining governance, risk analysis, technical expertise, supplier management, and remediation action coordination.

Solid experience in complex and international IT environments, as well as excellent communication skills with technical teams and management, will be particularly appreciated.

Profile Sought

We are looking for an operational CISO / Senior Security Officer, capable of intervening autonomously within a Modern Workplace perimeter.

Essential Skills

Appreciated Technical Environment

Expected Qualities

• Define, maintain, and improve the security posture of the Modern Workplace perimeter.
• Ensure the application of security policies and ISO 27001 requirements.
• Conduct and manage risk analyses.
• Identify priority security controls and monitor their effectiveness.
• Develop, update, and disseminate security policies, standards, and procedures.
• Manage remediation plans and continuous improvement actions.
• Support the security of workstations, Microsoft 365, and ITSM solutions.
• Evaluate technical architectures and security configurations.
• Integrate cybersecurity requirements into IT projects.
• Participate in architecture validation committees.
• Organize and monitor technical audits and penetration tests before production releases.
• Coordinate vulnerability management and corrective actions.
• Define and manage a third-party security assurance framework.
• Evaluate and monitor the security level of outsourcing providers and partners.
• Participate in supplier security committees and follow up on decisions.
• Monitor security commitments and indicators.
• Coordinate improvement plans with IT partners.
• Contribute to cybersecurity incident management in collaboration with incident response teams.
• Collaborate with IT, Cloud, cybersecurity teams, and various partners.
• Support cross-functional projects by integrating security requirements.
• Promote best practices among operational teams.
• Build and maintain cybersecurity dashboards.
• Monitor risks, security controls, and remediation plans.
• Produce regular reports for management.
• Formulate concrete recommendations for sustainable improvement of the security posture.
• Supplier and provider security assurance plan.
• Risk analyses and associated treatment plans.
• Modern Workplace security control framework.
• Security policies, standards, and procedures.
• Technical audit reports and penetration test follow-up.
• Remediation plans and monitoring indicators.
• Cybersecurity dashboards and reports.
• Recommendations for continuous improvement and ISO 27001 compliance.
• Proven experience in cybersecurity governance, GRC, and risk management.
• Excellent knowledge of ISO 27001 standard and security controls.
• Significant experience in securing Modern Workplace environments, Microsoft 365, and workstations.
• Mastery of managing technical audits, penetration tests, and remediation plans.
• Experience in managing the security of suppliers and providers.
• Good understanding of IT architectures, Cloud environments, and ITSM processes.
• Experience in coordinating cybersecurity incidents.
• Ability to produce indicators and reports for management.
• Microsoft 365 Security & Compliance
• Microsoft Entra ID / Azure AD
• Microsoft Intune
• Microsoft Defender
• Endpoint Security / Endpoint Management
• IAM and Identity Management
• Cloud and hybrid environments
• ITSM / ITIL
• Autonomy, rigor, and sense of responsibility.
• Excellent analytical and synthesis skills.
• Ability to challenge technical choices and propose suitable solutions.
• Interpersonal skills with technical and decision-making stakeholders.
• Collaborative spirit and results orientation.
• Ability to work in an international environment.

Project details

• Start: ASAP
• Duration: 2 ans
• Location: Île-de-France, France, FR
• Languages: French