Cybersecurity Engineer - GRC - Remote

Overview

As a Cybersecurity Engineer - GRC, you will contribute to enhancing the capabilities of clients to anticipate, protect, and defend against security risks by applying your skills and knowledge on strategic or operational topics.

In Short

• Governance of Information Security: dashboards, ISMS, security policies, security roadmaps;
• Compliance diagnostics and audits: ISO standards (27001, 27005);
• Analysis and evaluation of regulatory impact;
• Risk management: risk analysis (EBIOS RM, ISO 27005), operational risk mapping, integration of security in projects;
• Definition, deployment, and monitoring of risk and performance indicators;
• Management of security projects, deployment of risk management tools;
• Implementation and strengthening of internal control systems;
• Functional audits (architecture/configuration/organizational/intrusion tests) and security approvals;
• Advisory role in regulatory strategy.

Requirements

• Master's degree in Engineering or University with a specialization in cybersecurity;
• Experience in Governance, Risk, Compliance (GRC);
• Strong knowledge of functional cybersecurity;
• Good understanding of current information security standards (ISO27001, ISO27002, ISO27005, EBIOS RM);
• Certifications like Lead Implementer ISO27001, EBIOS, CISSP are a plus;
• Curiosity to understand technical aspects of cybersecurity;
• General knowledge of systems and networks;
• Good level of English (reading, documentation writing, meetings);
• Proactive, good interpersonal and writing skills, willingness to learn and improve.

Benefits

• Opportunity to work for a company committed to CSR;
• Secure employment in a permanent contract with a leader in engineering and R&D;
• Active listening and personalized solutions from recruitment and business managers;
• Career management and training to enhance skills;
• Strong team cohesion with regular team-building activities.