U
Consultant GRC - confirmé
Contract type
Ongoing
Work mode
Hybrid · France
Experience
3 years
Job description
A GRC consultant supports the security posture, governance and cyber risk management of a large group's information systems, coordinating with technical and business teams.
At a glance
- Work mode
- Hybrid · France
- Languages
- French
What you'll do
- Contribute to drafting and updating security policies, standards and procedures
- Ensure security requirements are applied within projects and applications
- Monitor compliance with frameworks and internal security requirements
- Perform security risk analyses on projects and applications
- Identify risks, assess their criticality and propose appropriate treatment measures
- Track risk treatment plans and associated reduction actions
- Monitor security incidents and coordinate corrective actions
- Track action plans from audits, permanent controls and vulnerability scans
- Contribute to monitoring implementation of security measures and continuous improvement
- Contribute to employee awareness actions on cyber risks
- Prepare and consolidate security indicators (KPI/KRI)
- Help prepare materials and reporting for steering bodies
What we're looking for
- Higher education in IT, cybersecurity or risk management
- Experience in security governance, risk and compliance, ideally in large-account environments
- Good knowledge of security frameworks and risk analysis methodologies (ISO 27001, NIST, EBIOS RM, DORA)
- Ability to formalize policies, procedures, risk analyses and action plans
- Strong writing and interpersonal skills to interact with technical and business stakeholders
- Rigour, autonomy, analytical mindset and ability to track several topics in parallel
Your team
Direction des Systèmes d'Information
The information systems department of a large group
Benefits
- Participate in the growth of a growing cybersecurity specialist company
- A personalized CSR and professional development path
- Possibility to work 50% of the time remotely
Apply
About UNEAT
A company specialized in cybersecurity offering expert services through its divisions
Specialized in cybersecurity, offering managed SOC and CSIRT, SecOps/DevSecOps technical assistance, and SSI/GRC consulting.
Key facts
- Cyber Defense Center: managed SOC service and CSIRT
- Expertise: SecOps / DevSecOps technical assistance
- Consulting: SSI / GRC advisory activities