# Security-Cybersecurity Expert-CDE* Home* Security-Cybersecurity Expert-CDE* October 27, 2026* 0 Comments* By Roberte OkoyaContext: Within the framework of IT outsourcing and information system security, the Security-Cybersecurity Expert works with the IT department and business stakeholders to strengthen information security governance, protect infrastructure and digital services, manage risks, ensure security maintenance, and improve incident detection and response capabilities. They ensure the application of security policies, regulatory requirements, and recognized best practices. Purpose: To manage operational security and information security governance within the managed services scope, reduce vulnerabilities, and organize incident response. Services covered: MCS; audits and remediation; EDR/MDR; MFA M365 and VPN; log centralization; ISMS, PAS, and IT charter; cybersecurity awareness training; information security dashboards; crisis management and support for external audits.Main responsibilities: • Conduct and update risk analyses, security audits, and remediation plans. • Monitor vulnerabilities, CVE alerts, ANSSI recommendations, and emerging threats. • Manage the security maintenance of infrastructure, systems, networks, Microsoft 365 environments, and remote access. • Define and administer EDR/MDR, IAM, MFA, privileged account policies, and logging rules. • Oversee the centralization and use of logs in SIEM/Syslog tools and monitor alert processing. • Define containment, eradication, remediation, and recovery measures in case of an incident. • Develop and maintain the Information Systems Security Policy (ISSP), the security assurance plan, the IT charter, and information security procedures. • Prepare indicators, dashboards, and security committee reports, and then report on risks and actions taken. • Organize crisis exercises, awareness campaigns, and cybersecurity training. • Support the Data Protection Officer (DPO), the Information Security Officer (ISSO), technical teams, and external auditors in compliance and control processes. Required Skills: Technical skills: systems and network security, EDR/MDR, IAM/PAM/MFA, SIEM, Syslog, vulnerability management, Microsoft 365 security, remote access security, and business continuity. Methodologies and frameworks: ISO/IEC 27001 and 27002, EBIOS Risk Manager or equivalent methodology, ANSSI guides, incident management, crisis management, GDPR, and data protection principles. Functional skills: information security governance, risk analysis, auditing, policy and procedure writing, indicator definition, action plan management, and user awareness training. Personal qualities: analytical and synthesis skills, rigor, discretion, teaching ability, autonomy, responsiveness, excellent writing skills, and the ability to coordinate technical and business stakeholders. Deliverables : Risk analysis; Information Systems Security Policy and Security Action Plan; IT charter; authorization matrix; incident management procedures; remediation plans; audit reports; information systems security dashboards; awareness materials.Required Profile: Master's degree (Bac+5 level) in cybersecurity, information systems security, computer science, networks, or a related field. Proven experience in securing IT environments, maintaining security, managing vulnerabilities and incidents, and implementing information security governance. Experience in managed services, multi-site environments, or environments subject to regulatory requirements is a plus. Fluency in spoken and written French; technical English required. Required Certifications: A recognized certification in information security management or governance, such as ISO/IEC 27001 Lead Implementer, ISO/IEC 27001 Lead Auditor, CISSP, or CISM, is required. Additional certification in risk management, incident response, Microsoft security, cloud, networking, or penetration testing is an advantage depending on the assigned technical scope. Interfaces : Director and Project Manager, systems and network experts, CIO, DPO, information security officer, SOC/EDR vendor, and external auditors.Application: CV + cover letter + copies of diplomas to be sent to contact@keoni.frFounded in 2008, Kéoni Consulting is an IT consulting and engineering firm specializing in the banking, financial markets, insurance, and industrial sectors. We are the partner for major accounts in their digital transformation. We help them transform their business model, align their operational processes, select the best technologies, and mitigate and overcome the risks associated with digitalization. Kéoni Consulting helps companies to: Make a difference , innovate and create , reinvent their business , satisfy customers, and gain a competitive advantage.**Job Category:** Digital Transformation**Job Type:** Full Time**Work location:** Europe## Apply for this position