Spécialiste Senior en Sécurité de l'Information

Cleeven is a European consulting firm founded on two core beliefs:

• The excellence of European engineers must be a driving force for global competitiveness
• Our human mission: to support our consultants in their personal and professional growth

As part of a major transformation project in a highly regulated environment, we are looking for an Information Security Officer (Senior Level) to support the structuring and harmonization of the Information Security framework during a critical transition phase.

• Design, analyze and formalize Information Security processes aligned with ISO 2700X standards
• Review, consolidate and merge existing documentation frameworks (policies, procedures, controls, guidelines)
• Define and structure a new Information Security framework applicable across the future target organization
• Prepare documentation and processes for the transition phase
  , ahead of official organizational changes
• Contribute to compliance with current regulations
  , with a strong focus on DORA
• Support and structure Information Security Risk Management activities
• Define and operate Third Party Risk Management processes (supplier assessments, risk follow-up, controls)
• Act as a key contributor within the Information Security governance, working closely with IT, Risk, Compliance and Management teams

• Proven experience as an Information Security Officer or in a similar Information Security / Governance role
• Strong expertise in ISO 27001 / ISO 27002 and ISO 2700X frameworks
• Solid understanding of regulatory constraints
  , particularly DORA
• Experience in financial services or insurance environments is a strong asset
• Very good knowledge of Information Security Risk Management principles
• Hands-on experience with Third Party Risk Management
• Strong capability to design, structure and document frameworks and processes
• Comfortable working in complex, regulated and evolving environments

• Master’s degree (or equivalent) in Information Security, IT, Risk Management or related fields
• Senior-level experience in Information Security, Governance, Risk or Compliance roles
• Fluent in English and German (both required)
• Strong analytical mindset and excellent documentation skills
• Able to operate autonomously while interacting with multiple stakeholders
• Comfortable in transformation and transition contexts