IT Security Consultant - GRC - Cybersecurity - Île-de-France

About Sopra Steria​

Sopra Steria, a major Tech player in Europe, with 51,000 employees in nearly 30 countries, is recognized for its consulting, digital services, and solutions activities. It helps its clients lead their digital transformation and achieve concrete and sustainable benefits. The Group offers a comprehensive response to the competitiveness challenges of large companies and organizations, combining in-depth knowledge of business sectors and technologies with a collaborative approach. Sopra Steria places people at the heart of its action and is committed to its clients to make the best use of digital technology to build a positive future. In 2025, the Group achieved a revenue of 5.6 billion euros.

The world is how we shape it*​

Sopra Steria (SOP) is listed on Euronext Paris (Compartment A) - ISIN Code: FR0000050809​

For more information, find us at www.soprasteria.com/fr​

*The world is how we shape it

Sopra Steria's Cybersecurity Business Line is present in Europe with over 2500 experts - more than half of whom are in France - our mission is to provide trusted solutions and services to the most exposed public and private entities to ensure the resilience of their critical systems and protect their sensitive digital assets.​

Beyond its strong European presence, the cybersecurity division is positioning and developing itself in North America (Toronto) and Asia Pacific (Singapore). ​

We offer 3 areas of expertise: Prevention, Protection & Detection, and Response. These 3 areas are interconnected to provide our clients with consistent information and informed decision-making capabilities based on operational reality. This approach is based on our cross-functional methodology centered on Mitre Att&ck. ​

Sopra Steria relies on proven and recognized sovereign capabilities to strengthen your resilience against cyberattacks and accelerate your digital transformation.​

• End-to-end trusted solution​
• A "security by design" approach focused on business risks and cross-organizational.​
• A commitment to the development of innovative sovereign solutions.​

Every individual can have an impact on responding to these new cyber risk challenges. Everyone contributes both individually and collectively to securing our clients and society while maintaining their personal and professional growth.

Within the Cybersecurity Division, you will join the Prevent Value Center at our Paris site. You will act as an IT Security Consultant, specifically focusing on Governance, Risk, and Compliance.

Your roles and responsibilities:

You will join the Governance, Risk, and Compliance perimeter teams as an experienced IT Security Consultant / GRC.

In your daily work:

• You will assist the CISO;
• You will manage and implement security governance (ISO27001);
• You will draft security policies and user charters;
• You will conduct risk analyses (ISO27005, EBIOS, …);
• You will manage security in projects;
• You will integrate security into processes;
• You will support compliance efforts: ISO27001, PCI-DSS, health data hosting …;
• You will ensure the production of indicators, security dashboards, and presentations to management;
• You will raise user awareness about IT security.

What we offer:

• A remote work agreement allowing you to work remotely up to 2 days per week depending on your assignments.
• An attractive benefits package: health insurance, employee benefits committee, meal vouchers, profit-sharing agreement, vacation and referral bonuses.
• Multiple career opportunities: over 30 job families, with many pathways to imagine together.
• Hundreds of training courses to develop your skills and grow within the Group.
• Self-paced training platforms to prepare for your certifications and support your personal development.
• The opportunity to get involved with our foundation or our partner "Vendredi".
• The opportunity to join the Tech'Me UP collective (training, conferences, watch, and much more…).

Your profile:

Graduated from an Engineering school or equivalent, you have at least 5 years of experience in Information System Security.

You possess:

• Good interpersonal skills and excellent communication qualities, necessarily in French and English (due to international assignments);
• A sense of rigor, synthesis skills, and the ability to simplify complex information;
• A good sense of organization, and you appreciate versatility and a variety of tasks.
• High autonomy, and you are attentive to client needs to provide quality service.

You enjoy working in a team and demonstrate synthesis skills to best advise clients.

Your interpersonal skills and presentation abilities allow you to facilitate workshops, lead meetings, and be comfortable with clients.

Certifications such as: **ISO2700X, CISSP, CISM, Risk Manager etc.** are a plus.

Your English level is fluent, both written and spoken.

Sopra Steria is committed to national and international communities to influence the development of cyber standards and norms. Our group is the first European member of Mitre's Affiliate Program and actively participates in OASIS and InterCERT.

As an inclusive and committed employer, our company works every day to combat all forms of discrimination and foster a respectful work environment. Therefore, committed to diversity and inclusion, we encourage all applications and all profiles.

https://www.soprasteria.fr/nous-connaitre/nos-engagements