Cyber GRC Specialist

Sonepar; Paris; Hybrid; EUR 65,000 - 90,000; Full time

Benefits offered by this job

Transport pass reimbursement 75%

Swile ticket restaurant card

Sustainable mobility package

Health insurance & Welfare

Employee Savings Plan & Profit Sharing

Job summary

Sonepar is seeking a Cyber GRC Specialist to strengthen governance, risk and compliance across an international, English‑speaking environment. You will collaborate with Group Cyber, regional directors and business teams to implement risk-based controls and awareness programs.

You will contribute to the documentation framework, perform risk assessments and translate findings into actionable remediation actions, while working in a hybrid Paris-based role with global stakeholders.

Qualifications

• Good understanding of key cybersecurity and risk management frameworks (NIST CSF, NIST 800-53, ISO 27001/27002/27005).
• Experience drafting or maintaining policies, standards, requirements or controls.
• Practical experience in cyber risk assessments and monitoring risk treatment plans.
• Ability to produce clear, structured deliverables and reports for diverse audiences.
• Ability to collaborate with global, regional and local teams in a matrix environment.

Responsibilities

• Contribute to the operational implementation of the Cyber GRC strategy.
• Translate cybersecurity requirements into actionable risk-based guidance for business teams.
• Engage with stakeholders to understand constraints and support decision-making.
• Own end-to-end topics with autonomy, supported by the Cyber GRC Director as needed.
• Develop awareness initiatives to strengthen cyber risk understanding across the Group.

Skills

Cybersecurity frameworks

Risk management

Policy drafting

Fluent French

Fluent English

Job description

Sonepar is an independent family-owned group and a world leader in the distribution of electrical equipment, solutions and related services to the trade. In 2025, Sonepar generated a turnover of €33.6 billion. With a presence in 40 countries and an extensive network of retail outlets, the Group is undertaking an ambitious transformation to make life easier for its customers by offering them an omnichannel experience and a range of sustainable solutions for the industrial, construction and energy sectors. Our 46,000 employees are committed to the electrification of the world and united by a shared Purpose: “Power Progress for Future Generations.

How will you shape our tomorrow

As part of the strengthening of the Group’s cybersecurity governance, we are looking for a Cyber GRC Specialist with relevant initial experience in Governance, Risk & Compliance. Versatile, rigorous and proactive, you will contribute to a broad range of topics, including the cybersecurity documentation framework, risk assessments, controls, compliance, TPRM and awareness.Reporting to the Cyber GRC Director within Sonepar Digital’s Cybersecurity & Infrastructure team, you will operate in an international, English-speaking environment. You will work with Group Cyber teams, the Regional Directors for the Americas, APAC and Europe, cross-functional teams including Enterprise Risk Management, Internal Control, Internal Audit and Legal, as well as Group entities.

Your role will be to contribute to the operational implementation of the Cyber GRC strategy and make cybersecurity requirements and risks clear and actionable. You will engage with Business teams, understand their constraints and support their decision-making by providing a clear view of risk.

You will progressively take ownership of end-to-end topics with a good level of autonomy, while receiving support from the Cyber GRC Director whenever needed.

What success looks like ?

• The Group Cyber GRC documentation framework is developed and maintained in collaboration with Domain and Regional Directors when required.
• Cyber risk assessments are completed, clearly presented and translated into actionable recommendations for decision-makers.
• Cybersecurity assessments of solutions and third parties provide a clear view of risks and required remediation actions.
• The implementation of Cyber requirements is effectively assessed with the relevant support functions, and identified gaps are appropriately followed up.
• Awareness initiatives are designed and delivered to strengthen the understanding of cyber risks and expected practices across the Group.
• Risk-based audit campaigns are defined and coordinated with the Cyber GRC Director, with clear findings and remediation priorities.

Profile

You have a minimum of 4 years of experience (excluding internships & apprenticeships) as a cybersecurity professional with a focus on Governance, Risk & Compliance. You have already contributed to several GRC topics and are looking to progressively broaden your scope in an international and evolving environment.You are comfortable working with technical, Corporate and Business stakeholders. You can formalize a need, analyze a risk, propose an approach and produce clear deliverables. You know when to seek guidance, support or a decision.

You are comfortable translating a framework into operational implementation and explaining cyber issues in terms of business impacts and decisions.

The experience you bring

Technical Skills

• Good understanding of key cybersecurity and risk management frameworks, including NIST CSF, NIST 800-53 and ISO 27001/27002/27005.
• Experience in drafting or maintaining policies, standards, requirements, controls or evidence requirements.
• Practical experience in cyber risk assessments and the monitoring of risk treatment plans.
• Ability to produce clear, structured deliverables and reports tailored to their intended audience.
• Ability to work with global, regional, and local teams in a matrix environment.
• Fluent French and English, both written and spoken.
• Autonomy and a proactive mindset, with the ability to seek support or escalation when required.
• Clear communication and the ability to adapt your message to technical, Business and management audiences.
• Analytical thinking, rigor and the ability to structure complex topics.
• Pragmatism and the ability to prioritize based on risk and operational considerations.
• Curiosity and adaptability in a transforming environment.

Work Mode & Location

Hybrid: 3 days in Paris (8ème) after the probation period

Benefits that await you:

• 75% reimbursement of your monthly or annual transport pass.
• Swile Ticket restaurant card
• Sustainable mobility package
• Health insurance & Welfare
• Employee Savings Plan & Profit Sharing Bonus.

Recruitment process

• Call with a Talent Acquisition Manager
• Hiring manager's interview
• Final HR interview

At Sonepar, we value your skills, your passion and if your career journey has had remarkable twists and turns, it only adds to your unique story. We ensure we create an inclusive environment where everyone feels welcomed and valued for their uniqueness. Regardless of physical abilities, office requirements, gender, sexual orientation, academic backgrounds or other diversity dimensions, every position at Sonepar is open to individuals who share our core values and engagements. We aim to ensure our job listings resonate with everyone and truly represent the diversity we embrace and we are proud to have the GEEIS Label (Gender Equality for European & International Standard) and to be partner of AGEFIPH (Association de Gestion du Fonds pour l’Insertion Professionnelle des Personnes Handicapées).

More information on Sonepar:

Website : www.sonepar.com

Twitter: @sonepar

LinkedIn: https://www.linkedin.com/company/sonepar/