Support clients in identifying, assessing, and managing cybersecurity risks
Contribute to the implementation and governance of Information Security Management Systems (ISMS)
Ensure compliance with regulatory and standards requirements in cybersecurity
Perform risk analyses using the EBIOS RM methodology
Identify assets, threats, risk scenarios, and security controls
Recommend risk treatment plans aligned with business objectives
Implement and maintain ISMS (ISO/IEC 27001)
Develop and update security policies (PSSIE)
Support information system accreditation
Monitor regulatory compliance (ISO/IEC 27000-series, NIS Directive, GDPR...)
Conduct organizational and physical security audits
Prepare audit reports, corrective action plans, and monitor their implementation
Advise and support stakeholders (executive committees, operators, users)

Master's degree (or equivalent) in cybersecurity, information security, or related field (engineering school, master's)
5 years of experience in similar roles in consulting firms, IT services companies, or large organizations
Proficiency in the EBIOS Risk Manager methodology
Strong knowledge of ISO/IEC 27001, 27002, 27005, 19011
Knowledge of the requirements of the NIS Directive, PSSIE, RGS (French General Security Framework)
Familiarity with GRC tools (EGERIE Risk Manager)
Basic knowledge of technical architecture and information systems security
Preferred certifications: ISO 27001 Lead Implementer / Lead Auditor, EBIOS RM

Senior GRC Consultant

Key skills