Alternant; e Cybersécurité - Compliance Officer H​/F

Job Title

Colas, a subsidiary of the Bouygues Group, is dedicated to imagining, building, and maintaining responsible transport infrastructures.

A global player in public works, Colas operates in more than 50 countries across five continents, bringing together 64,000 committed employees to connect people and facilitate exchanges in today's and tomorrow's world.

Join Colas! Contribute effectively to the development of territories while enjoying a work environment that allows each employee to be themselves, express themselves, and progress.

Within the Cyber Security Direction of COLAS, you will join the Governance, Risks & Compliance (GRC) sector. You will contribute to the pilotage of the Group's cyber security compliance in an international environment.

With your apprenticeship master, you will be involved in the implementation and monitoring of security directives, in close collaboration with IT and Cyber teams, to ensure the alignment of information systems with the defined reference framework.

1. Piloting Cyber Compliance

• Define and produce KPIs and dashboards to monitor entity compliance
• Contribute to the overall pilotage of cyber security compliance activities
• Participate in Cyber committees (preparation of materials, follow-up of actions)

2. Implementation of the Security Framework

• Contribute to the deployment of the Information Systems Security Policy (PSSI) and associated directives
• Participate in their continuous improvement and appropriation by teams

3. Evaluation and Compliance Monitoring

• Organize and pilot international declarative evaluation campaigns
• Analyze results, identify discrepancies, and produce clear and exploitable summaries
• Follow up on compliance action plans and support operational teams

4. Internal Controls

• Participate in the definition and implementation of recurrent controls
• Analyze discrepancies, coordinate stakeholders, and ensure remediation follow-up

5. Continuous Improvement

• Contribute to the evolution of GRC processes and control devices
• Propose optimization axes to strengthen the overall cyber efficiency of the device

6. GRC Tooling

• Participate in the pilotage of GRC tools
• Ensure the link with publishers (follow-up of evolutions, vigilance, improvement of uses)

1. Student in Master 2 in cybersecurity or equivalent (Bac+5)

2. Good level of English (written and oral) in an international professional context

3. Rigor, analytical spirit, and synthesis capacity

4. Ease in communication (written and oral)

5. Appetence for teamwork and cross-functional environment

Appreciable skills:

• Ability to analyze data, identify discrepancies, and formulate recommendations
• Knowledge of cybersecurity fundamentals / governance / risk management
• Sensitivity to Cyber references (ISO 27001, NIST, etc.)
• Ease with collaborative tools and reporting (Excel, Power BI, etc.)

Engaged in favor of inclusion, Colas guarantees the same welcome to all applications and offers everyone the same chances of recruitment, fulfillment, and success within the Group.