Technical Expert in Cybersecurity Compliance and Governance

Project overview

Job Title: Technical Expert in Cybersecurity Compliance and Governance

Reference: 26-04-6832-002

Responsibilities

Education:

Primary Skills:

Important Skills:

Required Qualities:

• Administer and evolve Microsoft Information Protection / Purview platforms (MIP, DLP, eDiscovery, IRM, Records Management, DSPM), Fortra Data Classification Suite, Digital Rights Management (DRM), and Data Loss Prevention (DLP).
• Define and maintain the classification taxonomy, create and optimize Sensitivity Labels and Label Policies.
• Implement encryption, automatic protections, and markings, and design DLP policies, including Endpoint DLP.
• Configure retention policies, monitor alerts, conduct investigations, and propose corrective actions.
• Integrate solutions with Entra ID, Intune, Defender XDR, and third-party solutions, and design, propose, and improve their architecture in a hybrid and multi-tool environment.
• Monitor and analyze incidents, adjust policies, and reduce false positives.
• Maintain and evolve standard site templates according to the needs of information security officers.
• Handle Level 2 and 3 incidents and complex problems (software, hardware, and security).
• Ensure lifecycle management, deployment, and industrialization of solutions.
• Develop and maintain PowerShell scripts for monitoring and automation.
• Produce reports, indicators, and monitoring dashboards, and write technical documentation, procedures, and user guides.
• Lead workshops, train internal teams, and support business acculturation.
• HES diploma, Bachelor's degree in IT, or equivalent.
• 3 to 5 years or more of experience in the skills below.
• Administration of Microsoft Information Protection platforms (MIP, DLP, eDiscovery, IRM, Records Management, DSPM), Fortra Data Classification Suite (DCS), Digital Rights Management (DRM), and Data Loss Prevention (DLP).
• Definition and maintenance of classification taxonomy.
• Creation and optimization of Sensitivity Labels and Label Policies.
• Implementation of encryption, automatic protections, and markings.
• Design and administration of Data Loss Prevention policies.
• Deployment, configuration, and maintenance of Endpoint DLP (USB control, exfiltration, browser, printing, etc.).
• Configuration of retention policies, alert monitoring, investigation, and proposal of corrective actions.
• Monitoring and analysis of incidents, policy adjustment, and reduction of false positives.
• Investigation and resolution of Level 2 and 3 incident tickets.
• Tool lifecycle management.
• Development, maintenance, and evolution of PowerShell scripts for monitoring and automation tasks.
• Writing and updating technical documentation and user guides.
• Maintenance and evolution of standard site templates based on needs expressed by information security officers.
• Participation in the definition and writing of production, administration, and operation procedures.
• Handling complex problems (software, hardware, and security) related to systems, software, and applications.
• Across all these cybersecurity governance and compliance solutions: ideally, experience gained in an environment of over 15,000 people.
• Functional administration of tools and advanced configurations.
• Integration with Entra ID, Intune, Defender XDR, and external third-party solutions.
• Design, proposal, and improvement of solution architecture in a hybrid and multi-tool environment.
• Development of reports and indicators, publication of dashboards and monitoring cockpits.
• Writing documentation (FAQs, guides, procedures, etc.).
• Deployment and industrialization of solutions.
• Support, continuous improvement, and incident resolution (Level 2 and 3).
• Leading workshops, training internal teams (information security officers), and business acculturation.
• Proficiency in French and English (ability to follow incidents with publishers by phone).
• Knowledge of protection solutions (Microsoft Information Protection, Microsoft Purview), classification (Fortra Data Classification Suite), Digital Rights Management, and Data Loss Prevention.
• Microsoft 365 environment, particularly Microsoft 365 Security & Compliance.
• Very good knowledge of Microsoft 365: SharePoint, Teams, Exchange Online.
• Solid cloud security skills: Entra ID, Defender XDR, Intune.
• Knowledge of BI tools, particularly Power BI, and Splunk.
• Network and security knowledge (proxy, reverse proxy, firewall, DNS, AD, OpenAM, antivirus, CASB).
• Appreciated certifications: SC-400, SC-300, ISO 27001.
• Knowledge of the regulatory framework: LPD, LSI, LIPAD, GDPR.
• Good cybersecurity practices.
• High integrity and personal ethics, ability to maintain absolute confidentiality and discretion regarding processed information.
• Ability to adapt to the context of a large public administration.
• Autonomy, sense of responsibility, and dynamism.
• Rigor.
• Ability to take initiative.
• Ability to work under stress.
• Ability to self-train.
• Ability to work in a team and share knowledge.
• Open attitude towards change.
• Good communication skills, customer orientation, flexibility, and team spirit.
• Writing skills and ease of expression.
• Proficiency in French and good understanding of technical English (manuals, alerts, etc.).

Project details

Geneva

Desired Start Date: 01/15/2027

100%

Remuneration: from 125,000 CHF / year

Job Description and Context:

We are looking for a client, a public administration in Geneva, a confirmed IT engineer, technical expert in cybersecurity compliance and governance, to strengthen its team responsible for cybersecurity compliance and governance.

The selected person will administer and evolve cybersecurity and data protection applications (Microsoft Information Protection / Purview, DLP, DRM, data classification), in line with existing governance and processes, serving all departments of the administration. Proficiency in French and English is required (incident tracking with publishers). Mission subject to client accreditation procedure. Long-term mission (up to 5 years).

• Start: flexible
• Location: Geneva, Geneva, CH
• Languages: French