Senior Cybersecurity Consultant – Modern Workplace, Governance & ISO 27001

Project overview

Mission Context

As part of strengthening the security of its Modern Workplace environment, our client is looking for a Senior Cybersecurity Consultant. The scope covers IT workstations, Microsoft 365, ITSM services, and associated solutions. The mission aims to improve the security posture, manage risks, and ensure compliance with the ISO 27001 standard. You will work in collaboration with Cybersecurity teams, SLS, M-CISOs, cloud teams, and outsourcing partners.

Main Missions

Third-Party Security and Supplier Committees

Risk Analysis, Audits, and Incidents

Governance, Policies, and Support

Reporting and Continuous Improvement

Expected Deliverables

Profile Sought

Experience: Minimum 5 years in cybersecurity.

Expertise and Skills Expected:

Qualities: autonomy, rigor, analytical skills, and excellent communication abilities.

Work Environment

This mission is with a player in the B2B services sector, within a Group context involving many stakeholders: Cybersecurity teams, SLS, M-CISOs, cloud teams, architecture, operations, and outsourcing partners. You will work on a Modern Workplace scope covering workstations, Microsoft 365, and ITSM services, with a compliance framework structured around the ISO 27001 standard.

Mission Modalities

• Define and maintain the third-party security assurance plan with suppliers and outsourcing partners.
• Participate in supplier security committees and ensure follow-up on decisions.
• Identify security controls, monitor indicators, and manage corrective actions.
• Conduct and coordinate risk analyses for the Modern Workplace scope.
• Organize technical audits and penetration tests before go-live.
• Contribute to cybersecurity incident management in coordination with the CSIRT.
• Define and update security policies, standards, and guidelines.
• Support operational teams in applying security requirements.
• Participate in architecture committees and Group transversal projects.
• Produce cybersecurity dashboards and reports for management.
• Propose actions for continuous improvement of security and ISO 27001 compliance.
• Third-party security assurance plan.
• Risk analyses and remediation plans.
• Technical audit and penetration test reports.
• Security standards, policies, and procedures.
• Cybersecurity dashboards and indicators.
• Supplier committee minutes and action follow-up.
• Recommendations for improving the security posture.
• Proven expertise in cybersecurity, governance, and IT risk management.
• Solid mastery of the ISO 27001 standard and security control mechanisms.
• Good knowledge of Modern Workplace environments: Microsoft 365, workstations, and ITSM.
• Experience in managing risks related to suppliers and outsourcing partners.
• Skills in security audits, penetration tests, and follow-up of remediation plans.
• Knowledge of cybersecurity incident management processes and interactions with a CSIRT.
• Ability to define security standards and produce monitoring indicators.
• Experience collaborating with cloud, architecture, security, and operations teams.
• Location: Paris and the Paris region
• Remote work: Negotiable, to be discussed during interviews
• Pace: Full-time (5 days per week)
• Start date: October 5, 2026
• Duration: 6 months

Project details

• Start: ASAP
• Duration: 6 mois renouvelable
• Remote: hybrid
• Location: Paris, France, FR
• Rate: 63-76 EUR/h
• Languages: French