Expert En Gouvernance De Securite; F​/H

Join Our It Department And Contribute To Our Digital Transformation

Our Information Systems team is:

• 450 passionate professionals, 20 professions, working on more than 350 projects and 800 applications worldwide.
• An ADN based on proximity and innovation.
• A mission: deliver added value to our internal and external clients by relying on agile methods.
• One single objective: "Make IT happen"!

Contribute to our development

As an Expert in Security Governance, you will have a central role in defining, implementing, and monitoring the information security governance policies and frameworks within our company.

Your missions will be the following:

• Development of Security Governance: Contribute to and maintain the security governance framework, ensuring it supports the company's strategic objectives while complying with legal and regulatory requirements. Define, update, and harmonize security policies, standards, and procedures to ensure global consistency within the company, and lead their adoption by IT, OT, and business teams.
• Risk Analysis and Management: Lead efforts to identify, assess, and address information security risks, ensuring a consistent and integrated approach across the organization. Deploy the EBIOS RM or equivalent risk management methodology, oversee risk analyses of critical projects or systems, and monitor the implementation of treatment plans to ensure an acceptable risk level for the company.
• Compliance and Audits: Ensure that information security policies and practices comply with applicable laws, regulations, and industry standards (NIS2, CRA, GDPR, ISO 27001, etc.). Support internal and external audits related to information security, identify gaps, lead corrective action plans, and ensure continuous compliance of the security system.
• Strategic Advice: Provide strategic advice to management on best practices in security governance, emerging trends, and residual risks. Contribute to defining the cybersecurity roadmap, strategic trade-offs, and prioritizing security investments. Participate in building the security budget.
• Training and Awareness: Promote a strong security culture within the organization by developing and implementing information security training and awareness programs. Support technical and business teams to enhance their understanding of risks and responsibilities, and foster the adoption of good practices on a daily basis.

Bring your skills

• Higher education: engineering school or equivalent, you have a minimum of 3 years of professional experience, with experience in security governance.
• ISO 27001 or EBIOS RM certification is a plus, as well as a cybersecurity certification, such as CISSP.
• Excellent communication and interpersonal skills, you maintain good relationships with internal teams, an external professional network, and manage multiple priorities.
• You have a deep analytical sense and are able to deliver quality reporting, both orally and in writing, in French and English.

Meet us

Recruitment process

• 1 – First exchange with our recruitment teams to discuss your background and motivation.
• 2 - Interview with the Group CISO and a team member to delve into the technical and functional aspects of the position.

Join an animated French international group with:

• Strong values: drive to undertake, passion for innovation, professionalism, team spirit, and respect for individuals, with concrete commitments to citizenship and sustainable innovations.
• Support for your development: nearly 1 in 2 positions are filled internally.
• Offer many benefits to its employees: QVT agreements including 2 days of remote work per week, vacation bonus, participation/profit sharing, CSE, company restaurant, gym...