Information Security Specialist - Project Support - Senior

Here's a brief overview of the tasks and responsibilities you'll have :
• Support asset management teams in the application of information security guidelines, requirements and best practices;
• Analyze needs, solutions, changes and issues from an information security perspective;
• Participate in the identification and assessment of security risks and propose appropriate mitigation measures;
• Evaluate security measures and controls in place or planned to validate their adequacy with applicable requirements;
• Contribute to the performance and follow-up of risk analyses, safety advisories, recommendations and treatment plans;
• Follow up on the implementation of security measures and identified corrective actions;
• Document security deviations and support the development of remediation plans;
• Write information security advisories, recommendations, analyses, and executive summaries;
• Participate in working meetings with the various stakeholders concerned;
• Collaborate with architectural advisors, cybersecurity specialists, and other stakeholders to ensure consistency in security interventions;
• Produce security analyses and advisories;
• Develop risk analyses and security recommendations;
• Prepare conformance analysis and security control assessment grids;
• Develop treatment and monitoring plans for risks as well as identified deviations;
• Provide executive summaries, recommendation notes, and documentation to support decision-making.

The profile we are looking for is as follows:
• Hold an undergraduate degree in computer science, cybersecurity, information security, or a related discipline;
• Have at least ten years of experience in information technology, including at least five years in information security or cybersecurity;
• Experience in security risk analysis, compliance analysis, and defining or evaluating security controls;
• Participate in mandates involving the analysis of technological or application solutions from an information security perspective;
• Master concepts related to identity and access management, data protection, logging, traceability, vulnerability management, infrastructure security, and cloud security;
• Knowledge of key information security frameworks, standards, and best practices, including ISO/IEC 27001, ISO/IEC 27002, NIST, and CIS Controls;
• Develop collaborative experience within multidisciplinary teams involving technical stakeholders, architectural advisors, managers and system owners;
• Demonstrate the ability to analyze complex issues, document risks, and make clear recommendations tailored to decision-makers.