Required skills
- Information Systems Security (SSI)
- Information Security Policy (ISP)
- Security by Design
- EBIOS RM
- Risk Analysis
- Architecture Review
- DevSecOps
- API Security
- OWASP Top 10
- Microservices
- Banking
- Insurance
Nice to have:CISSPCEHAgilePCI-DSSNIS2DSP2
Languages: French
Job description
Seeking an Information Security Engineer with 7 years of experience in Information Systems Security (SSI), specializing in risk analysis, security policies, and regulatory compliance within the banking and insurance sector.
Project overview
Assets: EBIOS RM, CISSP, or CEH certifications.
Profile sought
- Define SSI, PCA, fraud, and GDPR requirements with project managers and architects, in line with internal security policy.
- Lead risk analyses (EBIOS RM) and contribute to architecture reviews and approval committees.
- Validate the incorporation of security recommendations and the resolution of reservations before production deployment.
- Respond to requests from entity CISOs, ensure continuous monitoring, and raise awareness among development teams on best practices.
- 7 years of experience in Information Systems Security (SSI).
- Mandatory mastery of ISP and Security by Design.
- Essential practice of EBIOS RM.
- Proven experience in the Banking and Insurance sector.
- Various architectures: Mainframe, Open, N-tier, RIA/ROA, microservices.
- DevSecOps approach, API protection, and mastery of OWASP Top 10.
- Regulatory frameworks: BCE, ACPR, AMF, ORIAS, DSP2/3, NIS2, LPM, PCI-DSS.
- Practice of Agile working environments.
- Experience in Banking and Insurance
Project details
- Start: ASAP
- Duration: 1 an renouvelable
- Remote: hybrid
- Location: Toulouse, Occitanie, FR
- Rate: 50-63 EUR/h
- Languages: French
Indexed by 9am's meta-search. You are a job provider? Claim or manage this listing
Found on free-work.com