Cyber Security Analyst - Risk and Compliance

The role involves contributing to various transversal topics related to the security of Digital Workplace environments. This includes providing recommendations to project management and architecture to consider security constraints in accordance with group guidelines, conducting risk analysis on different subjects, presenting risks to the business/sponsor for acceptance, implementing mitigation measures, drafting PASFs for outsourced services, piloting pen tests on entrusted perimeters, and contributing to the activities of the entity's Security Run. Additionally, responsibilities include resolving incidents on managed perimeters and monitoring vulnerabilities on managed perimeters. The key deliverables expected in this role are security specifications for new projects and solutions, security and risk analysis aligned with Societe Generale Processes, mitigation proposals, presentations to the worldwide security community, follow-up on mitigation implementation and pen tests, risk reviews with management or ORM, security rules and SSAP documents for external services and contractors, incident/vulnerability follow-up on target perimeters, control definition and industrialization, recurrent risk reviews, and security validation for flows, rights, exceptions, and profiles. The ideal candidate for this position should have 8-12 years of relevant experience, expertise in MS Exchange/IronPort, MS Windows administration and hardening, Teams Telephony/SBC EBC, and familiarity with security standards such as ISO 27001/27005, NIST, CIS, and EBIOS. At Socit Gnrale, it is believed that people are drivers of change, shaping the world of tomorrow through their initiatives. Joining the team offers an opportunity to have a positive impact on the future, with a focus on creating, daring, innovating, and taking action. Employees are encouraged to engage in solidarity actions, supporting the Groups ESG strategy, and promoting diversity and inclusion within the organization.,