Join us
We are a global integration partner, capable of steering complex programmes, orchestrating the entire software vendor ecosystem, and mobilising the expertise needed to deploy robust, scalable critical platforms ready for future transformation requirements
Discover
Cybersecurity Consultant
Context and Objective:
Lead technical, organizational, and documentary security audits at critical external providers.
Responsibilities:
● Steering of certification audits:
- Plan and conduct security audits on outsourced service providers (maintenance, hosting, etc.). - Apply the SDD methodology based on the NIST CSF (Identify, Protect, Detect, Respond, Recover).
- Ensure compliance with deliverables and contractual deadlines (planning, internal/external dependencies).
● Governance and Compliance:
- Ensure information confidentiality and data security throughout the audits.
- Integrate SDD and NIST CSF framework requirements into all audit activities.
● Deliverables and Reporting:
- Produce a detailed risk and non-conformity analysis report, a statement of deviations from the SDD, recommendations, and an action plan for each non-conformity.
- Provide a consolidated report of the services audited during the year.
● Confidentiality and Information Security:
- Strict adherence to confidentiality and non-disclosure clauses.
- Implement confidentiality commitments for consultants/employees/subcontractors.
Profile
Education: Master's degree (Bac +5) in cybersecurity, IT, engineering, or equivalent field.
Experience:
○ Minimum 5 years of experience in cybersecurity and/or security auditing with critical providers.
○ Proven experience in conducting audits according to frameworks such as NIST CSF and SDD.
Technical Skills:
○ Mastery of the NIST CSF framework and provider security requirements (asset identification, access controls, data security, detection, response, and disaster recovery).
○ Knowledge of security requirements for sensitive data and critical environments (ATMs, data centers, software maintenance).
Soft Skills:
○ Analytical and synthesis skills, risk management, project management (planning, budget, scope).
○ Excellent written and oral communication skills in French (and technical English if required).
○ Sensitivity to confidentiality and professional ethics.
Back
