Cybersecurity Program Analyst

Extia; Porto; Presencial; EUR 48 000 - 72 000; Tempo integral

Resumo da oferta

Extia in Porto is seeking a cybersecurity professional to deploy maturity evaluation processes across the group entities and ensure alignment with Group cybersecurity requirements.

You will review evidence, identify gaps, communicate changes to requirements, and collaborate with IT providers and cybersecurity teams. Fluent English is mandatory; knowledge of NIST frameworks is a plus.

Qualificações

• Experience in Cybersecurity, Information Security, IT Risk, Governance, or Security Assessment.
• Good knowledge of cybersecurity frameworks, ideally NIST or an equivalent standard.
• General understanding of IT infrastructure, IT security, key IT processes, and regulatory frameworks.
• Knowledge of risk management and cybersecurity risk awareness.
• Exposure to IT continuity and backup management, including regulatory requirements such as DORA, is a plus.
• Knowledge of cryptography, key and certificate management, or CKMS, is a plus.
• Knowledge of network security, micro-segmentation, or network hardening, is a plus.
• Strong analytical, communication, and stakeholder management skills.
• Fluent English is mandatory; French is a plus.

Responsabilidades

• Deploy the cybersecurity maturity evaluation process across entities within your perimeter.
• Support entities in understanding Group cybersecurity requirements and the expected evidence.
• Review and assess evidence submitted by entities to ensure consistent assessments across the Group.
• Identify maturity gaps, cybersecurity risks, and areas needing improvement.
• Communicate changes to cybersecurity requirements, frameworks, and regulatory expectations to entities.
• Facilitate collaboration between IT providers, cybersecurity teams, and Group entities.
• Document assessment results and prepare reporting for Cyber Program governance.
• Develop a transversal understanding of cybersecurity and IT risk topics.
• Contribute to internal projects aimed at improving the maturity evaluation process.

Conhecimentos

Cybersecurity governance

Maturity assessments

IT risk

Security programs

IT continuity

Network security

Cryptography

NIST frameworks

Stakeholder management

English fluent

Descrição da oferta de emprego

You want to join a company that places people at the heart of its concerns? We are waiting for you at Extia!

Extia is an engineering consultancy which proposes since 2007 an unprecedented approach in its sector by combining well-being and performance at work. A successful model: more than 3000 Extians working in 22 agencies in France and abroad, 1st Great Place To Work® in France, 160 millions of euros of turnover and plenty of energy!

At Extia, it's "First who, then what" so, let's do it!

First who:

• Cybersecurity professional with experience in cybersecurity governance, maturity assessments, IT risk, or security programs
• Good understanding of IT security, cybersecurity frameworks, risk management, and regulatory requirements
• Knowledge of cybersecurity topics such as IT continuity and backup management, network security, or cryptography is appreciated
• Familiarity with NIST or equivalent cybersecurity frameworks
• Strong analytical skills, with the ability to assess evidence, identify gaps, and evaluate security maturity
• Strong communicator, comfortable interacting with international stakeholders, IT teams, cybersecurity experts, and senior management

Then what:

What You'll Do:

• Deploy the cybersecurity maturity evaluation process across entities within your perimeter
• Support entities in understanding Group cybersecurity requirements and the evidence expected from them
• Review and assess evidence submitted by entities, ensuring consistent and coherent assessments across the Group
• Identify maturity gaps, cybersecurity risks, and areas requiring improvement
• Communicate and inform entities about changes to cybersecurity requirements, frameworks, and regulatory expectations
• Facilitate collaboration between IT providers, cybersecurity teams, and Group entities
• Document assessment results and prepare reporting for Cyber Program governance
• Develop a transversal understanding of cybersecurity and IT risk topics
• Contribute to internal projects aimed at improving and enhancing the maturity evaluation process
• Continuously develop your expertise across different areas of cybersecurity, IT risk, governance, and regulatory compliance

What We're Looking For:

• Experience in Cybersecurity, Information Security, IT Risk, Governance, or Security Assessment
• Good knowledge of cybersecurity frameworks, ideally NIST or an equivalent standard
• General understanding of IT infrastructure, IT security, key IT processes, and regulatory frameworks
• Knowledge of risk management and cybersecurity risk awareness
• Exposure to IT continuity and backup management, including DORA requirements, is a plus
• Knowledge of cryptography, key and certificate management, or CKMS is a plus
• Knowledge of network security, micro-segmentation, or network hardening is a plus
• Strong analytical, communication, and stakeholder management skills
• Fluent English is mandatory; French is a plus