S-CISO MODERN WORKPLACE

Project overview

Mission Context

We are looking for confirmed cybersecurity expertise to strengthen the security of all components related to the end-user environment, particularly the IT workstation, Microsoft 365, and ITSM services. We wish to benefit from support capable of defining, maintaining, and improving the security posture of the Modern Workplace perimeter, in close coordination with the Cybersecurity teams, the SLS, the cloud teams, the M-CISOs, and our outsourcing partners. We expect solid expertise in ISO 27001 governance, control monitoring, risk analysis, technical audits, and remediation plan management.

We also wish to structure and manage a third-party assurance process, including monitoring security indicators, representing our company in supplier committees, and continuously improving delivered services. The sought-after expertise will need to contribute to cybersecurity incident management, the definition of standards and guidelines, as well as their communication to local operational teams and the SLS.

Finally, we expect the ability to contribute to architecture bodies, Group transversal projects, the organization of penetration tests and technical audits before production, as well as the production of dashboards for management.

Objectives and Deliverables

We want to leverage cybersecurity expertise capable of sustainably strengthening risk management and compliance for the Modern Workplace perimeter, in collaboration with the Global CISO, SLS teams, and IT partners.

• Define and maintain a third-party security assurance plan with outsourcing partners and solution providers.
• Represent our company in security committees with SLS suppliers and ensure follow-up on decisions.
• Identify key security controls, monitor key performance indicators, and coordinate corrective actions.
• Perform or manage risk analyses for the workstation, Microsoft 365, ITSM, and associated services perimeter.
• Plan, organize, and monitor technical audits and penetration tests before project go-live.
• Contribute to cybersecurity incident management in coordination with the CSIRT.
• Develop and update security standards, policies, and guidelines applicable to the Modern Workplace perimeter.
• Promote security requirements to operational, local, and SLS IT teams.
• Contribute to the work of the Architecture Design Authority and Group transversal projects.
• Produce cybersecurity dashboards and reports presenting the security level, risks, priority actions, and project progress.
• Maintain close collaboration with M-CISOs, cloud teams, and various entities.
• Provide concrete recommendations for continuous improvement of the security posture and ISO 27001 compliance.

Project details

• Start: flexible
• Remote: hybrid
• Location: 92400 Courbevoie, France, FR
• Languages: French