S

Sopra Steria

IT consulting, digital services, and transformation

Operational Security and Information Systems Manager - Cybersecurity

Security Operations & Incident Response +1Confirmed live in the last 24 hours
Full-timeColomiers, FranceNo salary listed

About the Job

Requirements

  • Have at least 5 years of experience as an operational security manager or information systems security manager, and 9 years of experience in information systems security and cybersecurity.
  • Have a degree from an engineering school or an equivalent university qualification.
  • Have strong interpersonal, communication, and writing skills.
  • Demonstrate rigor, synthesis, and the ability to explain technical matters clearly.
  • Be able to manage stress and pressure.
  • Demonstrate adaptability, ethical judgment, perspective, and anticipation of needs.
  • Demonstrate leadership, teamwork, and persistence in managing security actions and projects.
  • Be able to prioritize and manage risks.
  • Be proficient in strategic security planning.
  • Know security standards and regulations.
  • Be proficient with information systems security technologies.
  • Be able to process raw data or use tracking dashboards, including Excel and Power BI.
  • Be able to lead meetings and present recommendations persuasively.
  • Hold ISO 27001 Lead Implementer and ISO 27005 Risk Manager certifications.
  • Have strong information systems security expertise.
  • Have fluent written and spoken English.

Responsibilities

  • Govern security for customer contracts on behalf of the company CISO, ensure compliance with security rules, support operational teams in improving security measures, and advise on integrating and implementing security in projects and Cybercentre solutions and services.
  • Prepare and facilitate security committee meetings, ensure information quality, and track resulting actions.
  • Manage contracted security deliverables, including the Security Assurance Plan, Information Systems Security Policy, supplementary policies, deliverable control plan, role-based access control matrix, business continuity and disaster recovery plans, security incident management, security patch management, and information systems access management.
  • Conduct security controls in relation to the information systems of customer contracts and define and produce relevant key performance indicators.
  • Monitor security and vulnerabilities from sources including CERT bulletins, perform initial assessments of criticality and customer-system impact, recommend available operating system, middleware, and application security patches to the customer security manager, and oversee their deployment.
  • Track security coverage of information systems using security products, collect information about maintaining managed security solutions such as endpoint protection platforms and endpoint detection and response, and provide recommendations and action plans based on analyses such as solution coverage and update status.
  • Monitor security-tool alerts and suspicious information, contribute to security incident and crisis management, help define action plans, track implementation, and communicate with customers.
  • Support external audits by assisting client- or company-appointed auditors with collecting evidence and understanding the existing security framework.
  • Participate in implementing or improving the information security management system for designated scopes.
  • Assist customer information systems security managers with managing all or part of their information systems; define technical and organizational security measures, document them in Security Assurance Plans and operational security procedures, monitor them using security indicators, and advise on information systems security risks.

Desired Qualifications

  • Certifications such as cloud security posture management, Certified Information Security Manager, and ISO 27002 are an advantage.

About the Company

Sopra Steria

IT consulting, digital services, and transformation

Sopra Steria provides consulting, digital services and solutions to help large organizations transform their business through technology. Its offerings cover strategy, systems integration, cloud, cyber security, software development, and managed services, designed to be delivered end to end—from assessing needs and designing a plan to implementing and operating IT systems. The company combines deep knowledge of many industries with a collaborative approach to tailor projects to each client and to deliver measurable, sustainable improvements in performance. Differentiators include its European scale (about 51,000 employees across roughly 30 countries), broad scope—from strategy to operation—and emphasis on practical outcomes that help clients stay competitive. The group’s goal is to put digital to work for its clients in a way that creates a positive, more productive future for all stakeholders.

Company size
10,001+
Company stage
IPO
Headquarters
Paris, France
Founded
1968

Recently Posted Jobs

Explore more opportunities at Sopra Steria

See more jobs