Required skills
- Security Audits
- Cybersecurity Governance
- Risk Management
- ISO 27001
- Third-Party Assurance
- Security Indicators
- Supplier Management
- Remediation Plans
- Microsoft 365 Security
- Cloud Security
- Incident Management
- Security Architecture
Languages: French
Job description
We are looking for an experienced cybersecurity expert to strengthen the security of the end-user environment, including IT workstations, Microsoft 365, and ITSM services. The role involves defining, maintaining, and improving the security posture of the Modern Workplace perimeter.
Project overview
Context
We are looking for confirmed expertise in cybersecurity to strengthen the security of all components related to the end-user environment, particularly IT workstations, Microsoft 365, and ITSM services. We wish to benefit from support capable of defining, maintaining, and improving the security posture of the Modern Workplace perimeter, in close coordination with Cybersecurity teams, SLS, cloud teams, M-CISOs, and our outsourcing partners.
The expected expertise includes ISO 27001 governance, control monitoring, risk analysis, technical audits, and remediation plan management. It also involves structuring and managing a third-party assurance framework, including security indicator monitoring, representing the company in supplier committees, and continuous improvement of delivered services.
This expertise will contribute to cybersecurity incident management, the definition of standards and guidelines, and their communication to local operational teams and SLS. Finally, it will participate in architecture committees, Group transversal projects, the organization of penetration tests and technical audits before production deployment, as well as the production of dashboards for management.
Responsibilities
- Sustainably strengthen risk management and compliance for the Modern Workplace perimeter, in collaboration with the Global CISO, SLS teams, and IT partners.
- Define and maintain a third-party security assurance plan with outsourcing partners and solution providers.
- Represent the company in security committees with SLS suppliers and ensure follow-up on decisions.
- Identify key security controls, monitor key performance indicators, and coordinate corrective actions.
- Perform or manage risk analyses for workstations, Microsoft 365, ITSM, and associated services.
- Plan, organize, and monitor technical audits and penetration tests before project production deployment.
- Contribute to cybersecurity incident management in coordination with the CSIRT.
- Develop and update security standards, policies, and guidelines applicable to the Modern Workplace perimeter.
- Promote security requirements to operational IT teams, local teams, and SLS.
- Contribute to the work of the Architecture Design Authority and Group transversal projects.
- Produce cybersecurity dashboards and reports presenting the security level, risks, priority actions, and project progress.
- Maintain close collaboration with M-CISOs, cloud teams, and various entities.
- Provide concrete recommendations for continuous improvement of the security posture and ISO 27001 compliance.
Project details
- Start: flexible
- Remote: hybrid
- Location: 92400 Courbevoie, France, FR
- Rate: 66-66 EUR/h
- Languages: French
Indexed by 9am's meta-search. You are a job provider? Claim or manage this listing
Found on collective.work