Ingénieur cybersécurité gouvernance - Ferroviaire H​/F

Your Role

Mission Context:
Our client is a major player in the international railway sector, contributing to the development of embedded systems. As part of one of its projects, we are looking for a Cybersecurity Governance Engineer to strengthen a project for defining and deploying a cybersecurity architecture. You will be responsible for consolidating studies (risk analyses, evaluation, and compliance with standards), defining the target model, and supporting project and offer teams in its implementation, in Île-de-France and internationally.

Your responsibilities include conducting risk analyses (EBIOS RM / ISO 27005): defining the context, evaluating risks, formalizing the treatment plan, and deriving security requirements;
Defining and evolving the cybersecurity architecture: modeling the target model, establishing guiding principles, prioritizing, and allocating security requirements;
Evaluating and certifying compliance: collecting and analyzing test reports, aggregating internal statuses, consolidating compliance with standards, and producing summaries;
Managing third-party management (via shared service): controlling the quality of inputs, challenging quotes and deliverables;
Technically and functionally supporting offers/projects: contributing to clause-by-clause of requirements, defining solutions, and guiding their implementation;
Structuring and leading governance: ensuring vigilance, capitalizing on best practices, and reporting to management.

Profile sought:
Engineer (bachelor's degree or equivalent) in cybersecurity, IT/software, embedded systems, telecommunications networks, or industrial/automatic IT. You have 2 to 4 years of experience in industrial sectors and/or critical systems, ideally in the railway sector. Experience in fields such as energy, aerospace, automotive, or defense is also a plus. You communicate in English with ease (written/oral). Rigor, autonomy, and coordination skills are indispensable.

Technical environment:
Risk analysis methodologies: EBIOS RM, ISO 27005, Standards and references: IEC 62443 (series), TS 50701; GDPR framework and Cyber Resilience Act, OT/ICS: industrial architecture principles, supplier integration, securing remote access, Tools & practices: configuration management (Git), requirement tracking, and compliance, Writing: architecture notes, risk analysis reports, compliance dossiers, and treatment plans. Our benefits:
Attractive and evolving remuneration;
High-guarantee family mutual insurance; 60% covered restaurant vouchers; 100% urban transport tickets reimbursed;
Interest, participation, and cooptation bonuses;
Continuous training with Linked In Learning and our technical communities. In return, we offer you a quality work environment, creative spaces, and solid ongoing training. Are you passionate, tech-savvy, curious, and creative? Then we would be delighted to meet you. Apply.