Ingénieur cybersécurité - analyse de risques F/H

Overview

Swiss Life France is seeking a Security Engineer within the Information Security & IT Risk Management department. Location: Puteaux. The role focuses on IT security as a second line of defense, delivering risk analyses, risk communications, and remediation tracking to protect information systems.

Responsibilities

• Participate in IT security activities as the second line of defense.
• Conduct risk analyses using the EBIOS RM method to assess risks related to information systems security.
• Prepare and communicate risk analysis syntheses tailored to the needs of each team.
• Design interaction schemas between different information systems to identify potential security vulnerabilities within risk analyses.
• Develop remediation plans following risk analyses and ensure their monitoring.
• Develop and deploy indicators to measure the level of risk associated with information system security.
• Coordinate and monitor supplier audits (follow-up of action plans) and conduct delegated audits, coordinating with stakeholders.
• Provide expertise and support on security topics (DSI master plan, IT Business Review, interactions with the Swiss Life group, etc.).
• Interface with external consulting firms engaged by ISRM and track their work in relation to assigned projects.
• Participate in IT security awareness campaigns and information security watch activities.

Qualifications

• Master’s degree (Bac+5) with specialization in security management and/or information systems management.
• Minimum of 5 years of experience in a similar role.
• Ability to facilitate communication with stakeholders across departments within a DSI.
• Knowledge of ISO/IEC 27001 standard as part of your professional toolkit.
• Project management proficiency and familiarity with the latest trends in information security.
• Proven ability to manage risk analyses and deliver clear, actionable outputs.