Job Description & How to Apply Below
Longterm Project
Hybrid - 2 days onsite/week
Description - Information Security GRC Specialist
Mission Context
As part of its activities, our client is seeking an operational specialist in Information Security Governance, Risk, and Compliance (GRC) to strengthen the Information Security Office.
You will join the Governance, Risk, and Compliance team, responsible for ensuring adherence to security standards, processes, and the overall information security governance framework.
Main Responsibilities
As a GRC Specialist, you will be responsible for:
Exception Management & Compliance
Ensuring the follow‑up and continuous improvement of the security exception management process.
Tracking compliance deviations related to security governance policies and standards.
Managing and monitoring risk treatment mitigation measures originating from risk analyses (Ebios Risk Manager).
Following up on recommendations and remediation actions stemming from:
penetration tests,
configuration audits,
internal or external compliance audits.
Reporting & Governance Oversight
Producing KPIs and dashboards related to security exceptions for management reporting.
Secondary Responsibilities
Managing the team's mailbox, ensuring efficient daily follow‑up.
Managing the publication and updates of governance documents.
Contributing to the handling of security questionnaires for suppliers.
Required Profile
Essential Skills (Must‑Have)
5 years of experience in information security, including at least 3 years in GRC.
Excellent command of spoken and written French (C2 level).
Strong organizational skills with a methodical and structured approach.
Autonomy, proactivity, and a strong sense of responsibility.
Excellent communication skills and ability to work effectively in a team.
Good understanding of ISO 27001.
Nice‑to‑Have Skills
Knowledge of Risk Management (preferably EBIOS RM).
General understanding of security technologies (antivirus, firewalls, etc.).
Experience in Operational Security.
Participation in or contribution to an ISO 27001 certification project.
Soft Skills
Strong sense of rigor and confidentiality.
Results‑oriented mindset.
Ability to explain security concepts to non‑technical stakeholders.
Adaptability in complex or regulated environments.
Note that applications are not being accepted from your jurisdiction for this job currently via this jobsite. Candidate preferences are the decision of the Employer or Recruiting Agent, and are controlled by them alone.
To Search, View & Apply for jobs on this site that accept applications from your location or country, tap here to make a Search:
To Search, View & Apply for jobs on this site that accept applications from your location or country, tap here to make a Search:
Search for further Jobs Here:
×