GRC Consultant - Confirmed

U.NEAT is a company specializing in cybersecurity and offers expert services through its divisions:

• Cyber Defense Center: Managed SOC and CSIRT service

• Expertise: SecOps / DevSecOps technical assistance

• Consulting: SSI / GRC consulting activities

Within the Information Systems Department of a large group, the GRC (Governance, Risk, and Compliance) consultant will contribute to maintaining the security posture of the information system, SSI governance, and cyber risk monitoring.

They will also participate in the deployment of the Group's security policies, in coordination with technical and business teams.

Your missions

SSI Governance and Compliance

• Contribute to the drafting and updating of security policies, standards, and procedures

• Ensure the translation of security requirements within projects and applications

• Participate in monitoring compliance with internal security frameworks and requirements

Cyber Risk Analysis and Monitoring

• Conduct SSI risk analyses on projects and applications

• Identify risks, assess their criticality level, and propose appropriate treatment measures

• Ensure the monitoring of risk treatment plans and associated reduction actions

• Leverage methodologies and frameworks such as EBIOS Risk Manager, ISO 27001, or NIST

Operational Security Monitoring

• Participate in security incident monitoring and corrective action coordination

• Ensure the follow-up of action plans resulting from audits, continuous controls, and vulnerability scans

• Contribute to monitoring the implementation of security measures and the continuous improvement of the SSI posture

Awareness and Reporting

• Contribute to employee awareness campaigns on cyber risks

• Prepare and consolidate security indicators (KPI/KRI)

• Participate in the preparation of materials and reporting to steering committees

Your skills

• Higher education in IT, cybersecurity, or risk management

• Experience in SSI governance, risks, and compliance, ideally in a large account environment

• Good knowledge of security frameworks and risk analysis methodologies (ISO 27001, NIST, EBIOS RM, DORA)

• Ability to formalize policies, procedures, risk analyses, and action plans

• Strong writing and interpersonal skills to interact with technical and business stakeholders

• Rigor, autonomy, analytical skills, and ability to manage multiple subjects simultaneously

Benefits

• You participate in the development of a growing company, a specialist in cybersecurity

• An RSE (Corporate Social Responsibility) and personalized professional development path

• Possibility of remote work 50% of the time

Find Jobs in France on Arbeitnow