Senior Cybersecurity Maturity & Compliance Auditor

Keoni; Paris; Hybrid; EUR 70,000 - 100,000; Full time

Job summary

Demartino Law seeks a cybersecurity consultant auditor to evaluate the organization’s information security maturity against ANSSI, NIS2 and ISO 27001, identify gaps and risks, and map a pragmatic remediation roadmap. You will interview stakeholders, assess governance, IAM, backup, incident management, vulnerability handling, and produce actionable recommendations with an executive summary.

Responsibilities include mapping priority risks, delivering a prioritized plan, and presenting findings to

Qualifications

• Proficiency in ISO 27001, ISO 27002, NIS2, ANSSI and security best practices.
• Strong risk analysis methods, especially EBIOS RM or equivalent.
• Ability to audit IAM, MFA, privilege management, access controls and reviews.
• Knowledge of backup, DRP/BCP, crisis management and resilience mechanisms.

Responsibilities

• Prepare mission scope, collect documents, interview stakeholders and define audit scope.
• Interview business, IT, security, operations and management personnel.
• Assess maturity, map risks and vulnerabilities, and draft remediation actions.
• Deliver final report with prioritised actions and an executive summary.

Skills

ISO 27001

NIS2

ANSSI recommendations

Risk analysis

EBIOS RM

IAM audit

MFA

Privilege management

Access reviews

DRP/BCP

Vulnerability management

Patch management

Cloud/hybrid

Evidence analysis

Technical writing

Stakeholder management

Education

ISO 27001 Lead Auditor

ISO 27001 Lead Implementer

EBIOS RM

CISSP

CISM

CISA

CRISC

Job description

Demartino Law seeks a cybersecurity consultant auditor to evaluate the organization’s information security maturity against ANSSI, NIS2 and ISO 27001, identify gaps and risks, and map a pragmatic remediation roadmap. You will interview stakeholders, assess governance, IAM, backup, incident management, vulnerability handling, and produce actionable recommendations with an executive summary.

Responsibilities include mapping priority risks, delivering a prioritized plan, and presenting findings to