Senior Cybersecurity Consultant – GRC & Security Controls (M/F)

Background

As part of a strategic programme to strengthen information system security, run for one of our clients, a major international industrial group operating in a sensitive environment, we are looking for a Senior Cybersecurity Consultant specialising in GRC & Security Controls.

You will work on sensitive information systems, helping to keep them compliant and to continuously improve their level of security.

The assignment calls for a profile able to combine a solid GRC culture with an in-depth technical understanding of infrastructure and information systems.

Your responsibilities

• Carry out security controls on sensitive information systems.
• Check in particular access control, logging, patch management and system hardening measures.
• Analyse control results and write up the associated reports.
• Assess and maintain the security status of the various systems.
• Produce and consolidate security KPIs.
• Advise system and network administrators on the security measures to implement.
• Help define and improve operating procedures for administrators and users.
• Help improve security maintenance (MCS) and operational maintenance (MCO) processes.
• Help define and track security improvement plans.
• Take part in the evolution of the internal control framework.
• Contribute to information security risk analyses and compliance initiatives.

Your profile

• You have 5 to 10 years of experience in cybersecurity, notably on Governance, Risk & Compliance (GRC) topics.
• You have significant experience with information security management systems (ISMS).
• You have a strong command of security policies, internal control and risk management.
• You have enough technical skills to analyse the security of an information system in practice.
• You have already worked in sensitive, highly regulated or high-security environments.

Must-have skills

• GRC / Governance, Risk & Compliance
• EBIOS Risk Manager
• Information security risk analysis and management
• Windows Server and Windows Client
• Active Directory
• Group Policy Objects (GPO)
• Unix / Linux
• Networks and firewalls
• Log analysis
• Splunk
• Security controls
• Information system security

Nice-to-have skills

• ISO 27001 / ISO 27005
• Vulnerability management
• Security incident management
• Security by Design
• Cybersecurity project management
• Security maintenance (MCS)
• Operational maintenance (MCO)

Security clearance

Given the sensitivity of the environments involved, the ability to work on classified systems and information is a decisive requirement for the assignment.

SECRET-level security clearance and the ability to work in classified NATO and European Union environments are required.

Personal qualities

• Excellent analytical skills
• Rigour
• Autonomy
• Ability to challenge technical teams
• Strong writing skills
• Ability to explain security issues in plain terms
• A strong sense of confidentiality

Languages

• Fluent French
• Professional English essential

Terms

• Contract: permanent (CDI)
• Start: ASAP
• Location: Marseille area
• On-site presence: 100%
• Remote work: not compatible with the security constraints of the assignment
• Long-term assignment