Experienced Security Consultant - Banking Sector

Project overview

Context

Within the security department of the IT division of a large banking institution, the consultant supports a portfolio of projects in a highly regulated environment. They integrate cybersecurity challenges from the design phase and act as a liaison between project teams (Development / Business Analysis), architects, and security teams.

Missions

Conditions

• Assess project sensitivity and define upstream security needs through workshops with project managers and architects
• Define and formalize security requirements (Security by Design)
• Validate application architectures, network flows, and firewall opening matrices
• Promote secure architecture patterns and perform threat modeling
• Conduct risk analyses (EBIOS RM, ISO 27005) and write security appendices
• Ensure compliance with regulatory requirements and standards: GDPR, PSSI, ISO 27001 / 27002, as well as DORA and ACPR / ECB requirements depending on the scope
• Secure sensitive data processing (customer data, payments)
• Coordinate pentests and Bug Bounty campaigns, qualify vulnerabilities (CVSS), and monitor their remediation
• Manage specialized stakeholders (IAM, pentest, architecture) and ensure reporting to stakeholders, including the CISO
• Raise awareness among project teams and capitalize on security documentation

Project details

Île-de-France

• Start: flexible
• Remote: hybrid
• Location: Paris, France, FR
• Languages: French