Senior IT Security Analyst - Risk/Control/Audit

Wolters Kluwer N.V.; Albi; Hybride; EUR 60 000 - 80 000; Plein temps

Résumé du poste

Une entreprise innovante recherche un Analyste Senior en Sécurité Informatique pour diriger des efforts de cybersécurité et garantir les normes de sécurité les plus élevées. Dans ce rôle, vous serez responsable de la conception d'architectures de sécurité, de la gestion des audits de sécurité, et de la mise en œuvre de technologies avancées. Vous aurez l'occasion de travailler dans un environnement hybride dynamique, où votre expertise contribuera à façonner la posture de sécurité de l'organisation. Si vous êtes passionné par la sécurité informatique et que vous souhaitez avoir un impact significatif, cette opportunité est faite pour vous.

Qualifications

• 10 à 15 ans d'expérience en environnement informatique.
• Expertise en audit, contrôle, et gestion des risques informatiques.

Responsabilités

• Diriger la conception et la mise en œuvre d'architectures de sécurité complexes.
• Superviser la détection et la mitigation des menaces avancées.

Connaissances

Architecture de sécurité complète

Gestion des menaces avancées

Application de politiques stratégiques

Leadership en récupération d'incidents

Connaissance des normes de conformité

Mentorat d'équipe

Mise en œuvre de technologies

Planification stratégique et reporting

Formation

Diplôme universitaire en ingénierie générale ou sécurité de l'information

Outils

Enablon

Outils de sécurité (antivirus, pare-feu, WAF, SIEM)

Microsoft 365

Cloud (Microsoft Azure, AWS)

Description du poste

Within the Compliance & Assurance function, the Senior IT Security Analyst establishes information security compliance and assurance programs that meet business requirements and undertakes risk management, control management, audit management, and control framework improvement related activities.

About the Role:
As a Senior IT Security Analyst, you will independently lead comprehensive cybersecurity efforts within the organization. Your specialized skills will ensure the highest standards of security are upheld. You'll be pivotal in shaping our security posture, addressing advanced security challenges, and supporting team projects with your expertise.

Responsibilities:

1. Lead the design and implementation of complex security architectures.
2. Oversee advanced threat detection, monitoring, and mitigation efforts.
3. Direct comprehensive security audits and risk assessments.
4. Develop and enforce rigorous security policies and standards.
5. Manage intricate incident response and recovery processes.
6. Mentor less experienced security team members.
7. Implement cutting-edge security technologies and best practices.
8. Coordinate with cross-functional teams on security initiatives.
9. Ensure compliance with industry standards and regulations.
10. Prepare and present strategic security plans and reports to stakeholders.

Skills:

1. Comprehensive Security Architecture: Expertise in designing sophisticated security architectures.
2. Advanced Threat Management: Mastery in monitoring and mitigating advanced threats.
3. Strategic Policy Enforcement: Skills in developing and enforcing high-level security policies.
4. Leadership in Incident Recovery: Advanced incident response and recovery leadership.
5. Compliance Knowledge: Proficiency in navigating industry standards and regulations.
6. Team Mentorship: Ability to mentor and guide less experienced team members.
7. Technology Implementation: Capability to implement and manage advanced security technologies.
8. Strategic Planning and Reporting: Skills in strategic security planning and detailed reporting.

Work experience:
10 to 15 years of related work experience in IT environment:

1. IT risk, control, audit.
2. Compliance frameworks, such as SOC 2, SOC 1, ISO 27001, HIPAA, FedRamp, NIST.
3. Cloud environments: Microsoft Azure, AWS (Amazon Web Services).
4. Enablon software - or equivalent - nice to have.
5. Software development in an Agile environment.
6. Security tools: antivirus, firewalls, WAF, SIEM...
7. Microsoft 365 - Outlook, Word, Excel, PowerPoint, Teams.

Ability to write documents that are read, adopted, and used by the intended audience.

Education:
University degree in general engineering or related to information security, IT, or software development (BAC+5 in France). Security certifications are valued.

Languages: Fluent in French and English. Dutch is a nice to have.

Location: Bois-Colombes (Hauts de Seine, Paris area) - Hybrid