You will support our clients in managing their risks and ensuring compliance of their information systems.
Conduct risk analyses (EBIOS RM, ISO 27005) and assist in defining security policies (Information Security Policy
ISP).
Prepare and guide clients toward certifications (ISO 27001, HDS) or regulatory compliance (GDPR, NIS 2).
Define dashboards, monitor corrective action plans and lead security steering committees at the client site.
Design employee awareness programs and communicate security issues to executive management.

Education: Master's degree (Engineering school, Master's in Cybersecurity, Digital Law or IT Management)
Minimum 4 years of experience in a similar role in consulting or within a security department
Strong knowledge of security frameworks and international standards (ISO 27001, ISO 27005, NIST)
Excellent knowledge of the current regulatory framework (GDPR, French Military Programming Act, etc.)
Ability to conduct structured risk analyses (EBIOS RM)
Recognized professional certifications (CISA, CISM, ISO 27001 Lead Auditor/Implementer)

Consultant, GRC

Key skills