Consultant Cybersecurity (GRC) - Permanent

Salary: 55000/60000€

Context

The service is delivered within the Group Operations Security in Projects team. The mission focuses on vendor risk management and security due diligence activities, ensuring that security within Group Operations remains relevant, cost-effective, and delivered in accordance with the Group Security Strategy and Security by Design best practices.

Missions

• Perform security due diligence on vendor risk framework

• Support the Quality Assurance on IS and OR vendor assessments

• Support the preparation of VRC

• Identify and analyze product/project/vendor risks, recommend appropriate mitigation options, and document all components in clear, business-intelligible language

Service Deliverables (but not limited to)

• Documented vendor risk assessments with identified risks, mitigation recommendations, and supporting rationale written in business-intelligible language

• Completed IS and OR vendor assessment quality assurance outputs

• VRC preparation documentation and supporting materials

• Security due diligence reports on vendor risk framework

• Structured risk registers covering product, project, and vendor dimensions

Additional Information

• Sector: Audit / Consulting

• Areas: Design and Maintenance in Operational Condition (MCO), DevSecOps, Data Protection Officer (DPO)

• Languages: French (fluent), English (fluent)