Cyber Security Specialist

Responsibilities

• Contributing to the compliance of the relevant areas with regulations: NIS 2, DORA, CRA.
• Updating gap analyses between existing systems and regulatory/internal requirements.
• Continuing work, formalizing and managing compliance action plans, in conjunction with IT, business, and security teams.
• Monitoring the progress of action plans, reducing any gaps, alerting in case of deviations, and contributing to their prioritization.
• Ensuring the compliance of the French BtoC entity with internal cybersecurity frameworks and Group requirements: Cyber Umbrella, INCOME, etc.
• Supporting IT and business teams in the operational implementation of compliance requirements.
• Preparing for and contributing to compliance reviews, audits, and controls (internal and external).
• Facilitate workshops, meetings, and feedback sessions.
• Produce clear and concise deliverables for stakeholders: Business & IT Executive Committee, Group, Security Committee, etc.
• Contribute to the overall risk management approach.
• Ensure the compliance of IT projects, products, and services with internal cybersecurity frameworks and Group requirements.
• Identify risks: assess risks related to assets and products developed internally or through third-party suppliers, using recognized methodologies such as EBIOS RM or ISO 27005.
• Analyze risks: determine the probability and impact of identified risks on the company's IT assets.
• Mitigate risks: propose measures to reduce the probability and/or impact of risks, including the development and implementation of mitigation strategies.