Senior Information Security & Risk Management Specialist

VASS is looking for an expert Senior Information Security Expert to work for our client, euLisa in France, Strasbourg.

Job Description :

• Support the Agency's Information Security Officers in the management of information security and business continuity across organizational business processes and information systems;
• Develop security controls in the context of the agency's information security framework.
• Develop Information Security Management System (ISMS)procedures;
• Develop conceptual, logical and physical security models as appropriate;
• Draft security policies, standards, procedures and guidelines in accordance with ISO27001;
• Develop security plans and documentation (e.g., risk treatment plans, security test plans);
• Develop business continuity and disaster recovery plans;
• Perform security assessments and audits;
• Perform ISMS gap assessments;
• Design security controls in accordance with agency information security policies and standards;
• Provide assistance in formal accreditation process for information systems handling EU sensitive and classified information.
• Proven experience in information security risk management , compliance, and governance within enterprise environments.
• Strong command of ISO / IEC 27001 : implementation, control audits, and certification processes.
• Hands-on experience with :
• Security audits & risk assessments
• Business continuity (BCP) & disaster recovery (DRP)
• IAM (Identity & Access Management) knowledge
• Cloud Security , Network Security , and Data Protection
• Ability to develop and manage Information Security Management Systems (ISMS) aligned with EU regulations and ISO standards .

Technical & Operational Skills

• Familiarity with system administration practices
• Experience working within ITIL-based service management environments.
• Knowledge of Cloud Platforms (AWS, Azure) and secure architecture principles.
• Ability to bridge communication between technical teams and compliance / governance stakeholders .

Education Requirements :

• Master’s Degree in Network and Computer Security, Information Security, or a related field (minimum 4 years of relevant education after secondary school).

Experience Requirements :

• 6+ years of IT professional experience , with at least 4 years in Information Security Management and knowledge in system administration.

Required certificates :

• Certified Information Systems Security Professional ( CISSP ) or similar is an asset.