GRC Cybersecurity Consultant – IT Risk Analysis M/F
About the company
Consort Group has been supporting companies in leveraging their data and infrastructure for over 30 years. It relies on two leaders, Consortis and Consortia, and places people and social responsibility at the heart of its values.
This is your future team The Consortis teams are at the heart of current challenges in Cybersecurity, Virtualization & Cloud, Systems, Networks and Telecom, as well as Digital Workplace environments. RPA and DevOps skills reinforce these offerings to accelerate the agility and operational efficiency of the services delivered.
Your tasks
This is your mission Are you passionate about cybersecurity and risk management? This position is made for you.
As a GRC Cybersecurity Consultant, you are responsible for identifying and managing the cyber risks of our IT ecosystem, as well as defining the associated security measures:
On the risk analysis side
- Establish and maintain the IT risk mapping (infrastructure, applications, data, cloud, third parties)
- Conduct risk analyses according to recognized methodologies (MESARI, ISO 27005, NIST RMF)
- Identify security issues related to new services, applications, and projects
- Formalize the induced risks and propose appropriate treatment measures
- Define security requirements to be integrated from the design phase of projects
On the governance side
- Participate in the facilitation of the IT risk committee
- Report to governance bodies on the state of risks and the follow-up of action plans
- Contribute to the implementation of security measures within the framework of established comitology and processes
- Monitor indicators and remediation plans with project and business teams
Requirements
This is your background You have at least 3 years of experience in cybersecurity, with a GRC orientation, in demanding large corporate environments. You like to structure, convince, and make practices reliable without ever ceasing to innovate. You are looking for a framework where your ideas matter and where technical expertise goes hand in hand with collaboration.
This is your expertise*
- Mastery of risk analysis methodologies (MESARI, ISO 27005, NIST RMF)
- Experience in GRC (cyber risk management) and in large corporate environments
- Knowledge of infrastructure, applications, data, cloud, and third-party issues
- Technical English (reading/writing)
- A plus: experience in the banking sector and cyber certifications (ISO 27001, CISM, CRISC, CISSP…)
This is your way of teamwork*
- Sense of communication and pedagogy, ability to popularize risks to business units and management
- Rigor and synthesis skills to formalize and report clearly
- Interpersonal ease and sense of dialogue with various stakeholders (projects, business units, governance bodies)
What we offer
This is our commitment At Consort Group, you are an expert whom we support so that every mission becomes a meaningful step.
- Attentive and human onboarding
- Real managerial proximity
- Continuous access to training
- Concrete commitments: inclusion, equality, solidarity
- A complete HR package: health insurance, meal vouchers (TR), CSE, provident fund
- A culture of feedback and projects that make sense
How to apply
The recruitment process
- An initial telephone exchange with our recruitment team
- An HR interview as well as a business exchange with a business engineer
- A test or a technical exchange with one of our experts
- A final meeting with your future manager or mission lead
- And if we recognize each other: we start together
Other
GRC Cybersecurity Consultant – IT Risk Analysis M/F
Good to know Location: Massy (91) Contract: CDI Remote work: Hybrid, 2 days of remote work per week Salary: From 55 K€ to 60 K€ (depending on experience) gross annual Business family: Cybersecurity / GRC (Governance, Risk & Compliance)