Here is a brief overview of the tasks and responsibilities that will fall to you:
- Design and evolve security architectures as part of the organization's projects and initiatives.
- Advise business and technology teams on digital security guidance, standards, rules, and solutions.
- Carry out threat and risk assessments as well as impact analyses in order to identify security issues.
- Recommend solutions, priorities for action and improvement measures based on risks, needs and costs.
- Support infrastructure and application development and implementation projects to ensure the integration of security requirements.
- Participate in the production of opportunity files, business cases and vision, overall and detailed architectures.
- Validate deliverables and ensure their compliance with the organization's security norms and standards.
- Participate in architecture tables, multidisciplinary workshops and other integration activities with the business, information, application and technology teams.
- Present and popularize safety issues and recommendations to the various decision-making committees.
- Ensure the transfer of security expertise to internal resources.
The Profile Sought Is As Follows
- Have at least 8 years of experience in IT security, including 5 years in security architecture.
- Have completed, in the last 5 years, at least 4 mandates of 60 person-days each in information security, particularly in strategic studies, positioning or security advisories.
- Have completed, in the last 5 years, at least 1 mandate of 60 person-days in a project of more than 1,000 person-days, including integration tasks for a security architecture group.
- Have written and presented, in the last 5 years, at least 3 executive summaries in information security for senior management.
- Have participated, in the last 5 years, in at least 2 mandates applying the principles, controls or processes of ISO/IEC 27001, 27002 or 27005.
- Hold at least one of the following security certifications: CISSP, CISSP-ISSAP, CISA or ISO 27005 certification in risk management.
- Have completed, in the last 5 years, at least 1 security mandate of 60 person-days in a relevant technological environment: Windows Server/Windows 10-11, Active Directory/Entra ID, virtualization, administration and deployment tools, Linux, IAM, encryption/PKI, cloud computing (IaaS, PaaS, SaaS) or enterprise technologies such as SAP.
