INFORMATION SYSTEMS SECURITY OFFICER (CISO) - M/F

Description :ACTIVITIES :STEER THE INFORMATION SYSTEMS SECURITY STRATEGY, IN CONNECTION WITH THE DIGITAL DIRECTOR * Information Systems Security Steering Committee (CPSSI): report on the progress of SSI projects and measures, formulate proposals, and request decisions from the executive committee that presides over it * Maintain the Information Systems Security Policy (PSSI): ensure its implementation and evolve it if necessary, in connection with all the IT staff of the ENS * Monitor SSI indicators: number of vulnerabilities, incidents * Communicate to the executive committee and IT staff via a regular SSI newsletter * Work in collaboration with the Defense Security OfficerENSURE OPERATIONAL CONTINUITYENSURE OPERATIONALITY * Analyze and exploit SSI tools: analysis, filtering, and processing of alerts and incidents, investigations, risk and threat assessment, alerts if needed * Act as the interface between Renater and the IT staff regarding security incidents * Respond to user requests * Manage the preventive cyber crisis management system CONDUCT SSI AWARENESS ACTIONS * Carry out awareness and training interventions for students * Train administrative and research staff in cyber-security * Implement phishing exercises for educational purposesGUARANTEE THE INTEGRATION OF SECURITY INTO IT PROJECTS * Perform "SSI by design" analyses prior to the choice of application or infrastructure tools: in projects involving tool selection, analyze the proposed tools, evaluate the achievement of SSI criteria, and thus contribute to the implementation of new secure tools * Draft certification files for the selected tools in connection with business and digital project managers, as well as the DPO in case of personal data. Present these files to governance for the arbitration of any residual risks.MANAGE SSI PROJECTS * Recommend tools and evolutions to strengthen SSI (prevention, detection, correction) * Depending on the scale and transversality of the projects: * for certain transverse projects, manage the implementation of SSI tools, as a project manager, with project contributors from other teams * for projects involving a single team, act only as the requester / prescriber * Notably manage the project that will be particularly structuring for the coming years: the implementation of the NIS2 regulation within the establishmentCONTRIBUTE TO THE STEERING OF THE DIGITAL DIRECTORATE * Participation in certain transverse steering committees of the Directorate * Manage SSI editors and service providers * Ensure the budgetary and administrative management of their scope: budget preparation and monitoring of the allocated budgetTAKE PART IN LOCAL AND NATIONAL SSI COMMUNITIES * Participate in the national SSI network (sharing best practices, feedback, alerts), interact with Renater and the ANSSI * Participate in the local SSI network, led by the COMUE Profile sought: REQUIRED SKILLS:KNOWLEDGE OF THE PROFESSIONAL ENVIRONMENT: * Expertise in SSI and confirmed experience in this field * In-depth knowledge of information systems, with a transverse vision of the different dimensions (infrastructures, networks, applications, workstations, etc.) * In-depth notions of IS architecture * Mastery of issues related to digital sovereignty and an appetite for the use of open-source softwareOPERATIONAL KNOW-HOW: * Ability to propose, recommend, and convince * Ability to unite multidisciplinary teams around security issues * Ability to play a role of advice and decision support * Sense of innovation and experimentation * Experience in managing transverse projects * Technical English: conducting certain sessions in English for international studentsSOFT SKILLS: * Autonomy * Rigor and reliability * Reactivity * Interpersonal skills and ability to compromise * Pedagogy * Proactive * Pragmatism * Duty of discretion and respect for confidentiality * Sense of public serviceENVIRONMENT AND WORKING CONTEXT:The CISO of the ENS de Lyon is appointed by the President of the ENS de Lyon as the AQSSI. The CISO is a link in the global SSI functional chain (Ministry, establishment) (HFDS-FSSI-AQSSI-RSSICSSI). He/she is the "technical" interlocutor in the field of SSI for police and justice authorities. The CISO works in close collaboration with a deputy CISO, assistant to the head of the infrastructure team. The CISO may be required to act as a tutor for apprentices and/or interns if needed. Functional collaboration with all the IT staff of the establishment is an important dimension of this pos...