Cybersecurity Engineer

Jobtailor; Castet-Arrouy; Sur place; EUR 42 000 - 65 000; Plein temps

Résumé du poste

Jobtailor in Castet-Arrouy, France, is seeking a Governance, Risk and Compliance (GRC) specialist to help advance our information security program. You will manage ISMS activities, drive ISO 27001 and SOC 2 compliance, and support GDPR initiatives across departments.

You will identify risks, conduct audits, and partner with Legal and security teams to implement controls. The role emphasizes clear communication, meticulous planning, and continuous improvement in a fast-paced financial-sector

Qualifications

• Minimum two years of post-graduation experience in Governance, Risk and Compliance (GRC).
• Experience contributing to ISO 27001 and SOC 2 compliance programs.
• Fluent English with strong communication skills.
• Excellent organizational skills, analytical mindset and attention to detail.
• Familiarity with SWIFT and DORA frameworks is a plus.

Responsabilités

• Implement security projects outlined in the roadmap.
• Maintain and improve the ISMS and ISO 27001 certification.
• Contribute to compliance initiatives related to ISO standards, SOC 2, SWIFT, DPA and others.
• Collaborate with Legal to implement GDPR measures.
• Identify, assess and manage information security risks.
• Oversee internal and external audits.
• Develop and monitor continuous improvement plans.
• Promote security best practices across departments.

Connaissances

Fluent English

Strong communication

Organizational skills

Analytical mindset

Attention to detail

Enthusiasm

Description du poste

• Implement security projects outlined in the roadmap
• Maintain and improve the Information Security Management System (ISMS) and ISO 27001 certification
• Contribute to compliance initiatives related to ISO standards, SOC 2, SWIFT, DPA, and other frameworks
• Collaborate with the Legal team to implement the measures required for GDPR compliance
• Identify, assess, and manage information systems security risks
• Oversee and conduct internal and external audits
• Develop and monitor continuous improvement plans
• Enforce and evolve the Information Security Policy (PSSI) and related policies
• Ensure access control for internal applications
• Assess suppliers and incorporate security clauses into contracts
• Contribute to the management of security incidents, business continuity, and disaster recovery
• Promote security best practices across departments
• Lead internal phishing simulation campaigns
• Collaborate with the Security team and various departments to identify risks and ensure compliance

Requirements

• At least two years of post-graduation experience in Governance, Risk, and Compliance (GRC)
• Experience contributing to compliance programs, such as ISO 27001 and SOC 2
• Fluent English
• Strong communication skills, enthusiasm, and the ability to explain and educate
• Excellent organizational skills, analytical mindset, and strong attention to detail
• Familiarity with standards and frameworks specific to the financial sector, such as SWIFT and DORA, is a plus

Core Competencies

Demonstrates expertise in Governance, Risk, and Compliance (GRC) with a focus on ISO 27001 and SOC 2 compliance. Proficient in managing information security risks, conducting audits, and promoting security best practices across departments.

Highest-signal resume keywords

• Governance, Risk, And Compliance (GRC)
• ISO 27001 Compliance
• SOC 2 Compliance
• Information Security Management System (ISMS)
• GDPR Compliance

Hard Skills

• Information Security Policy Development
• Risk Assessment
• Internal And External Audits
• Continuous Improvement Plans
• Access Control Management

Soft Skills

• Strong Communication Skills
• Organizational Skills
• Analytical Mindset
• Attention To Detail
• Enthusiasm

Industry Keywords

• SWIFT
• DPA
• Security Best Practices
• Business Continuity
• Disaster Recovery