Senior Cybersecurity Consultant – Modern Workplace, Governance & ISO 27001

Project overview

Context:

Our client is looking for a Senior Cybersecurity Consultant to strengthen the security of its Modern Workplace environment, covering IT workstations, Microsoft 365, ITSM services, and associated solutions. The mission aims to improve the security posture, manage risks, and ensure ISO 27001 compliance, in collaboration with Cybersecurity teams, SLS, M-CISOs, cloud teams, and outsourcing partners.

Main missions:

Expected deliverables:

Profile sought:

• Define and maintain the third-party security assurance plan with outsourcing providers and partners.
• Participate in supplier security committees and monitor decisions.
• Identify security controls, track indicators, and manage corrective actions.
• Conduct and coordinate risk analyses for the Modern Workplace scope.
• Organize technical audits and penetration tests before production releases.
• Contribute to cybersecurity incident management in coordination with the CSIRT.
• Define and update security policies, standards, and guidelines.
• Support operational teams in applying security requirements.
• Participate in architecture committees and Group transversal projects.
• Produce cybersecurity dashboards and reports for management.
• Propose continuous improvement actions for security and ISO 27001 compliance.
• Third-party security assurance plan.
• Risk analyses and remediation plans.
• Technical audit and penetration test reports.
• Security standards, policies, and procedures.
• Cybersecurity dashboards and indicators.
• Minutes from supplier committees and action tracking.
• Recommendations for improving security posture.
• Confirmed expertise in cybersecurity, governance, and IT risk management.
• Strong command of the ISO 27001 standard and security control mechanisms.
• Good knowledge of Modern Workplace environments, particularly Microsoft 365, workstations, and ITSM.
• Experience in managing risks related to outsourcing providers and partners.
• Skills in security audits, penetration tests, and monitoring remediation plans.
• Knowledge of cybersecurity incident management processes and interactions with a CSIRT.
• Ability to define security standards and produce monitoring indicators.
• Experience collaborating with cloud, architecture, security, and operations teams.
• Autonomy, rigor, analytical skills, and excellent communication abilities.

Project details

• Start: flexible
• Remote: hybrid
• Location: Paris, France, FR
• Rate: 70-70 EUR/h
• Languages: French