GRC Consultant - Confirmed

U.NEAT is a company specializing in cybersecurity and offers expert services through its divisions:

• Cyber Defense Center: managed SOC and CSIRT service

• Expertise: SecOps / DevSecOps technical assistance

• Consulting: SSI / GRC consulting activities

You will be involved in a project to develop a tool dedicated to the Integration of Security in Projects (ISP). The objective is to harmonize risk analysis practices across a set of cyber repositories.

Your missions

Facilitation and Requirements Gathering

• Facilitate workshops with cyber referents and stakeholders

• Gather, formalize, consolidate, and prioritize business needs

Repository Construction

• Analyze existing repositories and define a reusable structure

• Build and consolidate the cyber risk repository

• Define the governance and maintenance rules for the repositories

Scope Definition for Future Tooling

• Formalize functional and technical requirements

• Draft the specifications and recommendations for the evolution of the target system

Your skills

• Higher education in IT, cybersecurity, or risk management

• Cyber risk analysis (EBIOS RM, ISO 27005) and good knowledge of security frameworks (ISO 27001/27002, NIST, ANSSI guides)

• Modeling and structuring of repositories (taxonomy, risk/measure mapping, capitalization)

• Writing functional and non-functional requirements, and specifications

• Integration of security in digital projects (Security by Design approach)

Benefits

• You will participate in the development of a growing company, a cybersecurity specialist

• A personalized CSR and professional development path

• Possibility to work 50% remotely

Find Jobs in France on Arbeitnow