S

Sopra Steria

IT consulting, digital services, and transformation

Operational Security and Information Systems Manager - Cybersecurity

Security Operations & Incident Response +1Confirmed live in the last 24 hours
Full-timeToulouse, France

About the Job

Requirements

  • At least 5 years of experience as an Operational Security Manager or Information Systems Security Manager (RSO/RSSI), and 9 years of experience in information systems security and cybersecurity.
  • A degree from an engineering school or equivalent university education.
  • Strong interpersonal, communication, and writing skills.
  • Rigor, synthesis, and the ability to explain technical matters clearly.
  • Ability to manage stress and pressure, adapt, act ethically, anticipate needs, and take a broader perspective.
  • Natural leadership, teamwork, and persistence in managing security actions and projects.
  • Ability to manage priorities and risks and to plan security strategically.
  • Knowledge of security standards and regulations and mastery of information-systems security technologies.
  • Ability to process raw data or work with tracking dashboards, including Excel and Power BI.
  • Ability to lead meetings and confidently present recommendations.
  • ISO 27001 Lead Implementer and ISO 27005 Risk Manager certifications.
  • Strong expertise in information-systems security.
  • Current written and spoken English.

Responsibilities

  • Assist client Information Systems Security Managers with managing all or part of their information systems.
  • Define technical and organizational security measures to meet security requirements, and document them in Security Assurance Plans and operational information-systems security procedures.
  • Monitor security measures daily using security indicators and provide strategic information, advice, and alerts about information-systems security risks.
  • Govern security for client contracts on behalf of Sopra Steria I2S's CISO, ensure compliance with security rules, support operational teams in improving associated measures, and advise on integrating and implementing security in projects and Cybercentre solutions and services.
  • Produce and facilitate security committee meetings, ensure information quality, and track actions.
  • Manage contractual security deliverables, including the Security Assurance Plan, Information Systems Security Policy, related policies, deliverables monitoring plan, role-based access control matrix, business continuity and disaster recovery plans, security incident management, security patching, and information-systems access management.
  • Perform security controls in line with the DICT of contract information systems and define and produce relevant key performance indicators.
  • Monitor security and vulnerabilities from multiple sources, including CERT bulletins; perform an initial assessment of their criticality and impact on client information systems; recommend available operating-system, middleware, and application security patches to the client Information Systems Security Manager; and supervise their deployment.
  • Track security coverage of information systems using security products, gather information on the maintenance in operational condition of security solutions managed by relevant teams (for example, endpoint protection platforms and endpoint detection and response), and produce recommendations and action plans based on analysis, including fleet coverage and updates.
  • Manage security incidents by monitoring alerts from security tools and reported suspicious information; contribute to incident and crisis management, help define action plans, track their implementation, and communicate with the client.
  • Support external audits by helping client- or company-appointed auditors collect evidence and understand the security arrangements in place.
  • Participate in implementing or improving the information security management system for identified scopes.

Desired Qualifications

  • Certifications such as cloud security posture management, Certified Information Security Manager, or ISO 27002.

About the Company

Sopra Steria

IT consulting, digital services, and transformation

Sopra Steria provides consulting, digital services and solutions to help large organizations transform their business through technology. Its offerings cover strategy, systems integration, cloud, cyber security, software development, and managed services, designed to be delivered end to end—from assessing needs and designing a plan to implementing and operating IT systems. The company combines deep knowledge of many industries with a collaborative approach to tailor projects to each client and to deliver measurable, sustainable improvements in performance. Differentiators include its European scale (about 51,000 employees across roughly 30 countries), broad scope—from strategy to operation—and emphasis on practical outcomes that help clients stay competitive. The group’s goal is to put digital to work for its clients in a way that creates a positive, more productive future for all stakeholders.

Company size
10,001+
Company stage
IPO
Headquarters
Paris, France
Founded
1968

Recently Posted Jobs

Explore more opportunities at Sopra Steria

See more jobs