S

Sopra Steria

IT consulting, digital services, and transformation

Operational Security and Information Systems Manager - Cybersecurity

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeCourbevoie, France

About the Job

Requirements

  • At least five years of experience as an Operational Security Manager or Information Systems Security Manager, and nine years of experience in information systems security and cybersecurity.
  • A degree from an engineering school or an equivalent university qualification.
  • Strong interpersonal, communication, and writing skills.
  • Rigor, synthesis skills, and the ability to explain technical topics clearly.
  • Ability to manage stress and pressure, adapt, act ethically, anticipate needs, and maintain perspective.
  • Natural leadership, teamwork, and persistence in driving security actions and projects.
  • Ability to manage priorities and risks and to plan security strategically.
  • Knowledge of security standards and regulations, and proficiency with information systems security technologies.
  • Ability to process raw data or use monitoring dashboards, including Excel and Power BI.
  • Ability to facilitate meetings and confidently present recommendations.
  • ISO 27001 Lead Implementer and ISO 27005 Risk Manager certifications.
  • Strong expertise in information systems security.
  • Fluent written and spoken English.

Responsibilities

  • Govern security for client contracts on behalf of the Sopra Steria I2S CISO, ensure compliance with security rules, support operational teams in improving security measures, and advise on integrating and implementing security in projects and Cybercentre solutions and services.
  • Ensure production of and facilitate the security committee, maintain information quality, and track actions.
  • Manage contractual security deliverables, including the Security Assurance Plan, Information Systems Security Policy, supplementary policies, deliverables follow-up control plan, role-based access control matrix, business continuity and disaster recovery plans, security incident management, security patching, and information systems access management.
  • Conduct security checks related to the information systems of contract scopes and define and produce relevant key performance indicators.
  • Monitor security and vulnerabilities from information sources, including CERT bulletins; perform initial analysis of criticality and client-system impact; recommend available operating system, middleware, and application security patches to the client security officer; and supervise deployment.
  • Track information systems security coverage across security products, gather maintenance-in-operational-condition information for solutions managed by relevant teams (such as endpoint protection platforms and endpoint detection and response), and produce recommendations and action plans based on analyses, including coverage and updates.
  • Monitor security-tool alerts and suspicious reports, contribute to security incident and crisis management, help define action plans, track implementation, and communicate with clients.
  • Support external audits by helping client- or company-appointed auditors collect evidence and understand the existing security arrangements.
  • Participate in implementing or improving the information security management system for identified scopes.
  • Assist client security officers with managing all or part of their information systems; define technical and organizational measures to meet security requirements; document them in deliverables such as Security Assurance Plans and operational security procedures; monitor them using security indicators; and advise and alert on information systems security risks.

Desired Qualifications

  • Certifications such as Cloud Security Posture Management, Certified Information Security Manager, and ISO 27002.

About the Company

Sopra Steria

IT consulting, digital services, and transformation

Sopra Steria provides consulting, digital services and solutions to help large organizations transform their business through technology. Its offerings cover strategy, systems integration, cloud, cyber security, software development, and managed services, designed to be delivered end to end—from assessing needs and designing a plan to implementing and operating IT systems. The company combines deep knowledge of many industries with a collaborative approach to tailor projects to each client and to deliver measurable, sustainable improvements in performance. Differentiators include its European scale (about 51,000 employees across roughly 30 countries), broad scope—from strategy to operation—and emphasis on practical outcomes that help clients stay competitive. The group’s goal is to put digital to work for its clients in a way that creates a positive, more productive future for all stakeholders.

Company size
10,001+
Company stage
IPO
Headquarters
Paris, France
Founded
1968

Recently Posted Jobs

Explore more opportunities at Sopra Steria

See more jobs