Cybersecurity Expert – ISP

Keoni; Paris; Hybrid; EUR 70,000 - 100,000; Full time

Job summary

Keoni, a cybersecurity consultancy, seeks a Cybersecurity Expert to provide consulting and support for business projects across Europe. The role reports to an ISS lead and integrates cybersecurity into application projects, defining security requirements and validating their implementation.

Responsibilities include risk analyses, development of guidelines, supplier qualification with regard to cybersecurity, advising projects on best practices, and proposing security improvements.

Qualifications

• Proven experience in consulting and security engagements.
• Strong background in IT security engineering for infrastructure.
• Solid knowledge of network security and data protection (DLP, SSDLC).
• Familiarity with regulatory frameworks such as OSE, NIS, DORA.
• Experience in security risk analysis and best-practice guidance.

Responsibilities

• Define security requirements for business activities and validate their implementation.
• Conduct risk studies and analyses to secure requested enhancements.
• Develop application guidelines and patterns for security.
• Ensure supplier and subcontractor cybersecurity qualification and compliance.
• Advise projects on security with best practices and propose domain security improvements.
• Collaborate with IT teams and local security units (SOC, perimeter, cyber risk).

Skills

Consulting expertise

IT security engineering

Network security

Data security (DLP, SSDLC)

Regulatory knowledge (OSE, NIS, DORA)

Job description

# Cybersecurity Expert – ISP* Cybersecurity Expert – ISPContext: The Cybersecurity Consulting for Applications (CCA) entity is seeking a Cybersecurity Expert to provide consulting and support for business projects. This role will be under the direct supervision of a cybersecurity information systems security (ISS) lead.The mission's activity involves integrating cybersecurity into application projects and providing business consulting by: • Defining security requirements associated with business activities, supporting and validating their implementation, • Conducting risk studies and analyses necessary to secure requested enhancements, • Participating in the development of application guidelines and requirements patterns, • Ensuring the qualification of suppliers and subcontractors involved, with regard to cybersecurity requirements and regulatory compliance, • Advising the project in accordance with best practices in security within the domain, • Proposing solutions to improve domain security. The cybersecurity expert will also collaborate with IT teams and other local security teams (Cybersecurity Operations Center, Perimeter Protection, Cyber Defense and Cyber Fraud, Risk Management/Compliance, etc.).Required skills: • Proven experience in consulting and expertise missions, • IT systems security engineering, • Solid technical foundation in infrastructure (network, NAC) and data security (DLP, SSDLC...), • Regulatory knowledge (OSE, NIS, DORA), • Mastery of the EBIOS RM cyber-risk analysis methodology, • Knowledge of the insurance sector, • Expertise in digital building security (OT/smart building) will be a plus.**Work location:** Europe