Digital Workplace Security Engineer - CDI

Contexte de la mission

Within Group Digital & IT, Digital workplace team provides critical IT services for the Group including but not limited to Active Directory, Azure Active Directory, IAM, O365, Device management, mobility management & collaboration tools.

As Digital Workplace security engineer, you support the Cybersecurity of services and platforms provided by Group Digital Workplace team. Reporting to Digital Workplace Security officer, you support the implementation of cybersecurity strategy, operation and compliance on your perimeter (in alignment Group IT and business strategy).

Objectifs et livrables

1. Build the security of Digital Workplace End-to-end services

• Define & implement an digital workplace strategy based on risks, threat landscape, technology evolution and group IT strategy

• Define & communicate digital workplace policies/standards and ensure their understanding;

• Steer Cybersecurity Projects on digital workplace, in coordination with group digital & IT team;

• Support digital workplace teams in the implementation of security into project and risk management;

• Steer and implement digital workplace governance (including committees and Dashboards);

• Security Watch on vulnerability and trends regarding digital workplace technologies.

2. Support Continuous Security Improvement of Digital Workplace

• Raising the overall security level of digital workplace stakeholders through awareness and trainings;

• Build & deploy digital workplace security controls;

• Contribute to the group digital workplace chapter/community;

• Contribute to the infrastructure security community

• Support local security officers on digital workplace topics.

3. Deliver security operation for Digital Workplace services & platforms

• Ensure the management of security into RUN activities (IAM, vulnerability, exception, flow opening, etc.);

• Deliver continuous security compliance (control tower) & periodical reporting;

• Steer the implementation of continuous remediation and improvement plans;

• Ensure Cybersecurity incidents management on his/her perimeter and contribute to resolution on major incidents or crisis;

• Ensure the RUN activities (controls, exceptions,