Responsable sécurité opérationnelle & système d'information - Cybersécurité - Rennes

Role Summary

You will monitor security and vulnerabilities from various sources of information, including our CERT bulletins, and perform first-level analysis on the criticality and impact on our clients' IS. In addition, you will propose the available OS/Middleware/Application security patches to the customer CISO and supervise their proper deployment.

You will monitor the security coverage of IS via various security products, by collecting elements relating to the MCS of the security solutions managed by the teams concerned (e.g. EPP, EDR, etc.) and producing recommendations and an action plan based on the analyzes (e.g. coverage of the fleet by these solutions, updating).

You will manage security incidents by monitoring alerts from security tools and suspicious information reported. You will contribute to the management of security incidents and possible crises, by helping to define the action plan, monitoring the actions put in place and ensuring communication with the client.

You will provide support for external audits, supporting auditors mandated by the client or company in collecting evidence and understanding the security system in place.

You will participate in the implementation or improvement of the ISMS of the identified areas.

Requirements

Graduate of an engineering school or university equivalent, you have at least 5 years of experience as a RSO/CISO, and 9 years of experience in Information Systems Security and cybersecurity. You combine the posture as well as the knowledge required for this role.

Soft skills

• Good interpersonal skills and excellent communication and writing skills
• A sense of rigor, a spirit of synthesis and a capacity for popularization
• Good control and management of stress and pressure
• Great adaptability and a good sense of ethics
• An ability to take a step back and anticipate needs
• You have natural leadership and enjoy team spirit
• You are pugnacious in managing your security actions and projects

Know-how

• You know how to manage priorities and risks
• You master strategic security planning
• You are aware of safety standards and regulations
• You master IS security technologies
• You know how to process raw data or through monitoring dashboards (Excel, PowerBI)
• You know how to lead meetings and prescribe your recommendations with convictions

You are certified ISO27001 Lead Implementer, ISO27005 Risk Manager.

You have strong expertise in IT security

• Certifications such as: CSPM, CISM, ISO27002, etc. are a plus.
• Your level of English is fluent, both written and spoken.
• Sopra Steria engages in national and international communities to influence the development of cyber norms and standards. Our group is the first member of the Miter Affiliate Program in Europe, and actively participates in OASIS and InterCERT.

Benefits

What we offer you

• A teleworking agreement to telework up to 2 days per week depending on your missions.
• An interesting benefits package: mutual insurance, a CSE, restaurant vouchers, a profit-sharing agreement, vacation bonuses and co-optation.
• Multiple career opportunities: more than 30 job families, so many pathways to imagine together.
• Hundreds of training courses to develop your skills and evolve within the Group.
• Independent training platforms to prepare for your certifications and support your personal development.
• The possibility of getting involved with our foundation or our partner “Friday”.
• The opportunity to join the Tech'Me UP collective (training, conferences, monitoring, and much more...).
• An inclusive and committed employer, our company works every day to fight against all forms of discrimination and promote a respectful working environment. This is why, committed to diversity and diversity, we encourage all applications and all profiles.
• https: //www.soprasteria.fr/nous-connaitre/nos-engagements

About the Company

Are you curious and motivated by human and technological transformations? Do you want to learn continuously from our teams, to be confronted with new clients/contexts and varied issues?

Then you are in the right place.

At Sopra Steria Next, you join a consulting firm that combines business and technological expertise, and which is among the best in management and digital transformation.

We help our clients succeed in their transformation projects by creating value beyond the simple economic aspect, by making sense of data, innovating through artificial intelligence and engaging all stakeholders at every stage.

What drives us: having a concrete impact on the experience and commitment of employees within large companies and public organizations in various sectors: aeronautics, ministries, transport, energy, financial services, etc.

Our approach: explore subjects in depth, constantly improve our skills, innovate and stay attentive to the best practices in our specialty in order to better serve the challenges of our clients.

Our strengths: a collective that helps each other to find the best solutions for our customers, a united team and a spirit of trust.