Cyber GRC Specialist — Global Risk & Compliance

Sonepar; Paris; Hybrid; EUR 65,000 - 90,000; Full time

Benefits offered by this job

Transport pass reimbursement 75%

Swile ticket restaurant card

Sustainable mobility package

Health insurance & Welfare

Employee Savings Plan & Profit Sharing

Job summary

Sonepar is seeking a Cyber GRC Specialist to strengthen governance, risk and compliance across an international, English‑speaking environment. You will collaborate with Group Cyber, regional directors and business teams to implement risk-based controls and awareness programs.

You will contribute to the documentation framework, perform risk assessments and translate findings into actionable remediation actions, while working in a hybrid Paris-based role with global stakeholders.

Qualifications

• Good understanding of key cybersecurity and risk management frameworks (NIST CSF, NIST 800-53, ISO 27001/27002/27005).
• Experience drafting or maintaining policies, standards, requirements or controls.
• Practical experience in cyber risk assessments and monitoring risk treatment plans.
• Ability to produce clear, structured deliverables and reports for diverse audiences.
• Ability to collaborate with global, regional and local teams in a matrix environment.

Responsibilities

• Contribute to the operational implementation of the Cyber GRC strategy.
• Translate cybersecurity requirements into actionable risk-based guidance for business teams.
• Engage with stakeholders to understand constraints and support decision-making.
• Own end-to-end topics with autonomy, supported by the Cyber GRC Director as needed.
• Develop awareness initiatives to strengthen cyber risk understanding across the Group.

Skills

Cybersecurity frameworks

Risk management

Policy drafting

Fluent French

Fluent English

Job description

Sonepar is seeking a Cyber GRC Specialist to strengthen governance, risk and compliance across an international, English‑speaking environment. You will collaborate with Group Cyber, regional directors and business teams to implement risk-based controls and awareness programs.

You will contribute to the documentation framework, perform risk assessments and translate findings into actionable remediation actions, while working in a hybrid Paris-based role with global stakeholders.