Activity Pilot

Project overview

We are looking for an Activity Pilot for a 3-month renewable mission in Paris.

Context:

As part of the Cybersecurity and Digital Risks Directorate (DCRN), the Information Security Governance, Risk, and Compliance (GRC SSI) team is engaged in several projects aimed at strengthening cyber risk management, security governance, compliance monitoring, and continuous improvement of control mechanisms.

While awaiting the recruitment of its activity pilot, the manager of the GRC SSI domain wishes to use a transition provider to ensure the piloting of activities.

The activities that will be under the pilot's supervision cover the areas of SSI compliance, controls and audit, vulnerability management, awareness, subsidiaries, and Reporting.

The activity pilot will report to the manager of the GRC SSI domain and will contribute to achieving the domain's objectives.

Project details

Mission Objective

Ensure the coordination and operational piloting of a GRC SSI activity portfolio, in order to:

The holder of the mission is responsible for the quality of deliverables, adherence to commitments, consistency of practices, and the proper execution of the roadmap.

Main Activities:

Profile Sought

• Guarantee the execution of recurring activities
• Guarantee the achievement of operational objectives
• Guarantee visibility of work progress and associated indicators
• Ensure coordination of the employees and providers concerned
• Secure deliverables
• Identify and track risks, dependencies, and points of attention
• Ensure visibility with management
• Contribute to the continuous improvement of GRC SSI domain practices.
• Activity Piloting
• Provide operational support and expertise to the team
• Organize and lead operational committees
• Consolidate schedules, workloads, and priorities
• Monitor the progress of activities and action plans
• Identify risks, alerts, dependencies, and blocking points
• Ensure adherence to the domain's priorities and commitments
• Facilitate coordination between contributors and stakeholders
• Coordinate work with the expertise manager
• Ensure the adequacy of the system with our regulatory challenges.
• Securing Deliverables
• Secure the quality of produced deliverables
• Guarantee the compliance of deliverables with our regulatory challenges
• Guarantee adherence to internal frameworks, processes, and standards
• Contribute to the continuous improvement of GRC SSI domain practices
• Formalize procedures, indicators, and operating methods
• Contribute to the preparation of governance bodies.
• Activity Reporting
• Produce the Reporting elements necessary for domain piloting
• Consolidate information reported by the teams
• Produce objective monitoring indicators
• Guarantee the achievement of GRC SSI domain objectives.
• Management Support
• Ensure transverse monitoring of team activities
• Prepare necessary arbitration and alerts
• Facilitate coordination between different teams
• Prepare decision-making support elements for management.
• Expected Deliverables
• Minutes of operational committees and decision records
• Tracking sheet for actions, risks, and arbitration
• Consolidated activity dashboard
• Validation opinion on the main deliverables produced by the team
• Summary of decisions and points of attention from the bodies in which the provider participates as a replacement for the GRC SSI Domain Manager
• Minimum 7 years of experience in cybersecurity, cyber risk management, SSI controls and audits, including coordination and piloting responsibilities
• Solid skills in cybersecurity and cyber risk management, SSI controls, enabling challenging of work and recommendations
• In-depth knowledge of the main regulatory frameworks in the financial sector (e.g., DORA, NIS, IA Act, etc.)
• Significant experience in a complex and highly regulated environment (banking, insurance, industry)
• Ability to structure and monitor an activity portfolio, produce indicators, and ensure Reporting to the Domain Manager
• Experience representing at directorates, committees, or governance bodies
• Ability to challenge productions and analyses while maintaining a constructive working relationship
• Ease in interactions with managers, experts, and directors
• Transverse coordination ability.
• Start: ASAP
• Duration: 3 mois (renouvelables)
• Location: 75 - Paris, FR
• Languages: French