IS Security Consultant - GRC - Cybersecurity - Île-de-France

Role Summary

Within the Cybersecurity Division, you will integrate the Prevent Value Center on our Paris site. You work as an IT Security Consultant, particularly around Governance, Risks and Compliance.

Your roles and missions

You will join the teams in the Governance, Risks and Compliance scope as a confirmed IS Security / GRC Consultant.

In your daily life

• You assist the CISO;
• You manage and implement security governance (ISO27001);
• You write security policies and user charters;
• You carry out risk analyzes (ISO27005, EBIOS, etc.);
• You manage security in projects;
• You integrate security into processes;
• You support compliance: ISO27001, PCI-DSS, health data hosting, etc.;
• You ensure the production of indicators, safety dashboards and presentation to management;

You raise user awareness about IT security.

Requirements

Graduate from an engineering school or equivalent, you have at least 5 years of experience in Information Systems Security.

You are equipped with

• Good interpersonal skills and excellent communication skills, necessarily in French and English (because international missions);
• A sense of rigor, a spirit of synthesis and a capacity for popularization;
• A good sense of organization and you appreciate the versatility and plurality of missions.
• Have great autonomy and you listen to customer needs, to provide quality service.
• You enjoy working in a team and demonstrate a spirit of synthesis to best advise clients.
• Your interpersonal skills and ability to provide feedback allow you to lead workshops, lead meetings, and be at ease with clients.
• Certifications such as: ISO2700X, CISSP, CISM, Risk Manager etc. are a plus.
• Your level of English is fluent, both written and spoken.
• Sopra Steria engages in national and international communities to influence the development of cyber norms and standards. Our group is the first member of the Miter Affiliate Program in Europe, and actively participates in OASIS and InterCERT.

Benefits

What we offer you

• A teleworking agreement to telework up to 2 days per week depending on your missions.
• An interesting benefits package: mutual insurance, a CSE, restaurant vouchers, a profit-sharing agreement, vacation bonuses and co-optation.
• Multiple career opportunities: more than 30 job families, so many pathways to imagine together.
• Hundreds of training courses to develop your skills and evolve within the Group.
• Independent training platforms to prepare for your certifications and support your personal development.
• The possibility of getting involved with our foundation or our partner “Friday”.
• The opportunity to join the Tech'Me UP collective (training, conferences, monitoring, and much more...).
• An inclusive and committed employer, our company works every day to fight against all forms of discrimination and promote a respectful working environment. This is why, committed to diversity and diversity, we encourage all applications and all profiles.
• https: //www.soprasteria.fr/nous-connaitre/nos-engagements

About the Company

About Sopra Steria

Sopra Steria, a major player in Tech in Europe, with 51,000 employees in nearly 30 countries, is recognized for its consulting, services and digital solutions activities. It helps its clients carry out their digital transformation and obtain concrete and lasting benefits. The Group provides a global response to the competitiveness challenges of large companies and organizations, by combining in-depth knowledge of sectors of activity and technologies with a collaborative approach. Sopra Steria places people at the heart of its action and is committed to its clients to make the most of digital technology to build a positive future. In 2025, the Group achieved a turnover of 5.6 billion euros.

• The world is how we shape it*
• Sopra Steria (SOP) is listed on Euronext Paris (Compartment A) - ISIN code: FR0000050809
• For more information, find us at www.soprasteria.com/fr
• *The world is as we make it

Sopra Steria's Cybersecurity Business Line is present in Europe with more than 2,500 experts - more than half of whom are in France - our mission is to provide trusted solutions and services to the most exposed public and private actors to ensure the resilience of their critical systems and protect their sensitive digital assets.

Beyond the strong European presence, the cybersecurity division is positioning itself and developing in North America (Toronto), as well as in Asia Pacific (Singapore).

We offer 3 areas of offering: Prevention, Protection & detection and response. These 3 areas work together to provide our customers with consistent information and decision-making capabilities informed by operational reality. This approach is based on our transversal methodology centered on Miter Att&ck.

Sopra Steria relies on proven and recognized sovereign capabilities to strengthen your resilience to cyberattacks and accelerate your digital transformation.

An end-to-end trusted solution

A “security by design” approach focused on business risks and transversal to the organization.

A commitment to the development of innovative sovereign solutions.

Each individual can have an impact on responding to these new cyber risk challenges. Everyone contributes both individually and collectively to securing our clients and society while maintaining personal and professional growth.