Assistant CISO – Cyber Risk Management

Keoni; France; Remote; EUR 65,000 - 90,000; Full time

Job summary

Kéoni Consulting in France seeks an Information Systems Security Consultant to support the CISO within the Risk Management Department. The role covers governance, risk analyses, and security operations, collaborating with technical teams and business stakeholders.

You will help update security policies, monitor cyber risks, and contribute to awareness initiatives while ensuring compliance with ISO 27001 and NIST frameworks.

Qualifications

• Experience with risk analysis methodologies (EBIOS Risk Manager).
• Knowledge of ISO 27001 and NIST standards.
• Governance experience in information security.

Responsibilities

• Support governance, risk management, and security operations.
• Analyze and monitor cyber risk for projects and upgrades.
• Integrate security requirements from scoping and provide recommendations.

Skills

InfoSec governance

Risk analysis

EBIOS Risk Manager

ISO 27001 knowledge

NIST standards

Incident management

Security reporting

Cross-functional collaboration

Communication skills

Education

Bachelor's in IT / IS / CS

Job description

# Assistant CISO – Cyber Risk Management* Home* Assistant CISO – Cyber Risk Management* October 9, 2026* 0 Comments* By Roberte OkoyaContext: As part of strengthening information systems security within the Risk Management Department, we are seeking a consultant to support the CISO in their daily tasks. The candidate will actively participate in maintaining the security posture, information systems security governance, monitoring cyber risks, and deploying the Group's security policies.Missions : Reporting directly to the CISO of the Risk Management Department, the consultant will work on governance, risk management, operational security, and awareness-raising aspects. Their main responsibilities will include: • Information Security Governance: contributing to the updating, formalization, and dissemination of security policies, standards, procedures, and frameworks applicable to the Department. • Cyber Risk Management: conducting or supporting risk analyses for projects, applications, and information system upgrades, and then monitoring risk mitigation measures. • Project Support: integrating security requirements from the scoping phase, challenging proposed solutions, and formulating recommendations tailored to business and technical challenges. • Action Plan Monitoring: consolidating and managing actions resulting from audits, ongoing controls, risk analyses, security tests, and vulnerability scans; and alerting authorities in case of deviations or roadblocks. • Incident Management: Contribute to the qualification, escalation, and follow-up of security incidents; participate in lessons learned sessions; and ensure the implementation of corrective actions. • Control and Compliance: Prepare evidence, contribute to compliance reviews, and monitor the application of internal, regulatory, and normative requirements. • Information Security Reporting: Produce, validate, and comment on security indicators, dashboards, KPIs, and KRIs for steering committees and governance bodies. • Awareness: Design or disseminate awareness initiatives tailored to employees, project teams, and business stakeholders. • Coordination: Act as the interface between the CISO, technical teams, business units, risk, compliance, and audit functions, as well as relevant partners. • Monitoring: Track evolving threats, practices, and frameworks to propose continuous improvements to the security posture.Required Expertise • Strong understanding of information security governance and compliance principles. • Experience with risk analysis methodologies, particularly EBIOS Risk Manager, and knowledge of ISO 27001 and NIST standards. • Understanding of operational security challenges: incidents, vulnerabilities, audits, controls, and remediation. • Ability to develop and present relevant indicators to management bodies. • Excellent writing skills, ability to synthesize information, and capacity to adapt communication to technical and business audiences.We are looking for an Information Systems Security Consultant, at an intermediate to experienced level, who is autonomous, rigorous, and proactive. The candidate must be comfortable working in a cross-functional environment, be able to prioritize tasks, and build trusting relationships with technical teams, business stakeholders, and regulatory bodies.Application: CV + cover letter + copies of diplomas to be sent to [e-mail] in 2008, Kéoni Consulting is an IT consulting and engineering firm specializing in the banking, financial markets, insurance, and industrial sectors. We are the partner for major accounts in their digital transformation. We help them transform their business model, align their operational processes, select the best technologies, and mitigate and overcome the risks associated with digitalization. Kéoni Consulting helps companies to: Make a difference , innovate and create , reinvent their business, satisfy customers, gain a competitive advantage, become the leader in their sector, and become the leader in their sector. Our services cover the entire information systems lifecycle (Project Management, Business Analysis Consulting, Design, Implementation, Maintenance, Production, and Operations).**Job Category:** Digital Transformation**Job Type:** Full Time**Work location:** Europe