GRC Assistant - International industrial Group (M/F)

About the company

Within an IT department of 20 employees, you will join the cybersecurity team and contribute directly to the definition of the Group's security framework. An ideal position to develop skills in current topics, with real visibility towards the IT department and business units.

Your tasks

• Your missions:
• Participate in the implementation of ISO 27001, NIS2, and IA Act standards and regulations: gap analysis, action plans, compliance monitoring
• Draft and evolve the PSSI as well as associated security policies and procedures
• Contribute to cybersecurity governance: committees, indicators, dashboards, risk mapping
• Study supplier contracts: security clauses, RGPD compliance, third-party assessment
• Support technical and business teams in adopting security rules
• Exchange with subsidiaries and Group interlocutors internationally

Environment: ISO 27001, NIS2, IA Act, RGPD, PSSI, risk analysis, third-party management.

Requirements

• A first experience in GRC: 2 years of work-study or 1 year in CDI minimum, junior profiles are welcome
• A dual competency is expected, in addition to GRC: either a legal sensitivity (RGPD, IA Act) or technical knowledge in cybersecurity
• A good level of English is required, in an international Group context

What we offer

• A fast-growing Group, with a company acquired every year to support its international development, particularly in Europe
• Structuring and current projects (NIS2, IA Act) to accelerate your career in GRC
• A real CSR & sustainability dimension: strong commitment to ecological transition, eco-design, and carbon footprint reduction
• A culture of trust and long-term: simplicity, respect, sharing, and an average employee seniority of over 9 years
• Executive status, 12 days of RTT, 1 day of teleworking, profit-sharing, participation.

Other

ADDITIONAL INFORMATION

• Location: Lyon - Saint Quentin Fallavier
• Contract: CDI - Executive status
• Salary: 35K€ / 38K€ depending on profile