Cybersecurity Consultant M/F

Mc2i; Portugal; Sur place; EUR 70 000 - 105 000; Plein temps

Résumé du poste

Mc2i is seeking an experienced Security Integration in Projects professional to act as a Risk Assessor within the ISP team in Portugal. You will collaborate with project teams and cybersecurity peers to embed security by design across IT initiatives.

You will lead risk analyses, coordinate external pentests, validate new applications, and review architectures to strengthen controls across on‑prem and cloud environments. Fluency in English is assumed, with French recommended.

Qualifications

• Minimum 4 years of cybersecurity and risk assessment experience.
• Ability to challenge stakeholders diplomatically and report clearly.
• Strong knowledge of ISO 27005 / EBIOS RM and risk treatment.

Responsabilités

• Security integration from project initiation and risk analysis.
• Perform BIA and CATIS, identify threat scenarios, define mitigations.
• Coordinate pentest activities and verify remediation.
• Assess new applications/tools for security compliance and controls.
• Review architectures for security, including IAM, encryption, logging.

Connaissances

InfoSec principles

Risk analysis

Threat modelling

Vulnerability management

Architecture security

Application security

Network security

Cloud security

AI security awareness

Leadership

Stakeholder communication

French language

Outils

AS400

SAP

Cloud AWS

Azure

GCP

Alibaba

Salesforce

CCSP

ISO27001

CISA

CRISC

CEH

CISSP

CCNA

Description du poste

Within the Cybersecurity Department of a major Luxury Group, the Security Integration in Projects (ISP) team ensures that security requirements are proactively and effectively embedded across all IT projects within the Group.

The ISP acts as a key player in the cybersecurity framework in order to:

• Reduce exposure to cyber risks
• Ensure regulatory compliance
• Enforce internal security standards
• Promote a strong Security by Design culture

The objective of this mission is to act as a Risk Assessor within the ISP team, contributing to all activities within the scope, in close collaboration with project teams, business stakeholders, cybersecurity teams, and design functions (architecture, privacy).

Main Activities:

• Security integration from project initiation: participation in Kick-Off Meetings, project criticality assessment, identification of security stakes, and triggering of required analyses.
• Risk analysis and treatment: execution of Business Impact Analysis (BIA) and CATIS, identification of threat scenarios, risk evaluation (custom methodology aligned with ISO 27005 & EBIOS RM), definition and follow-up of mitigation measures.
• Pentest coordination and follow-up: planning and coordination with external providers, analysis of test reports, and monitoring of vulnerability remediation.
• Validation of new applications/tools: risk assessment, compliance verification against internal standards, definition of compensating controls where needed, and issuance of formal security opinions.
• Technical architecture challenge: security review of proposed architectures (network segmentation, IAM, encryption, APIs, logging, interconnections) and formulation of recommendations prior to production go-live.

Confirmed to Senior Profile (minimum 4 years of experience) with strong expertise in cybersecurity and risk assessment activities.

Technical skills:

• Strong knowledge of Information Security principles
• Risk analysis expertise (ISO 27005 / EBIOS RM aligned)
• Blueteam and security control expertise
• Architecture security (on-premise and cloud environments)
• Application security
• Network and Infrastructure security
• Vulnerability management
• Understanding of modern IT environments
• Expertise in AI, Cloud security, payment systems security would be highly appreciated
• Project environments include: AS400, Headless architectures, SAP, data platforms, new retail points of sale, Cloud AWS, Azure, GCP, Alibaba, Salesforce
• Certifications could be an advantage : CCSP, ISO27001, CISA, CRISC, CEH, CISSP, CCNA Cisco,...
• Facultative : Redteam culture or experiences

Soft Skills

• Ability to challenge stakeholders diplomatically
• Strong analytical and structured mindset
• Leadership capabilities
• Strong synthesis and reporting skills
• High level of autonomy
• Proactive and solution-oriented mindset

Languages

• French: recommended

We value diversity and inclusion. Every voice matters, and we encourage applications from all backgrounds.

All our offers are open to people with disabilities.