BE - Governance, Risk and Compliance Expert at Positive Thinking Company

, , -

Full Time

Start Date

Immediate

Expiry Date

10 Oct, 26

Salary

0.0

Posted On

12 Jul, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Information Security Strategy, Risk Management, Compliance, ISO 27001, ISO 27005, EBIOS RM, NIST, NIS2, DORA, GDPR, Internal Auditing, Incident Management, Security Awareness Training, ISMS Implementation, Analytical Skills, French and English Fluency

Industry

IT Services and IT Consulting

Description

Overview Who are we? Collaboration Betters The World (CBTW), is a company providing tech et business solutions to its clients, through the expertise of its 9 service lines. As a Governance, Risk and Compliance (GCR) Expert, you will join our Cybersecurity service line, where we are combining proactive and reactive strategies, we protect businesses against evolving cybersecurity threats, ensuring regulatory compliance and fortifying digital assets. Responsibilities What is your role? You will be part of a journey where you will have two impacts: a client impact and an internal impact. For the internal impact, based on your skills and time, you will be joining our internal security community at CBTW, to share knowledge and best practices. For the client impact, tasks can vary depending on the client and the project, but as a GCR Expert, you will mainly: 1. Strategy and Governance: Help define information security strategy and scope Organize, frame, and manage security projects Implement an Information Security Management System (ISMS) Contribute to defining/revising policies and procedures (ISSP, SCS, incident response) 2. Risk Management: Analyze and map risks (ISO 27005, EBIOS RM) Identify, evaluate, and monitor operational, compliance, and security risks Implement security performance indicators (KPIs) 3. Compliance and Regulation: Ensure compliance with cybersecurity and data protection regulations (NIST, NIS2, DORA, GDPR) Evaluate information security posture Conduct internal audits 4. Incident Management: Coordinate security incident response Monitor remediation plans (following incidents, audits) Implement corrective measures 5. Training and Awareness: Provide training and raise employee awareness about GRC policies Promote security standards and best practices Qualifications What is your profile? You: Hold a bachelor's or Master's degree in Cybersecurity, Information Security, or equivalent Have a minimum 5 years of experience in similar roles Speak French and English fluently Are certified ISO 27001 LI & LA (obtained or in progress) or ISO 27005 RM. Any CISM, CISP, CRISC, or CISA certifications are a plus. Master ISO 2700X standards (ISO 27001, ISO 27002, ISO 27005) Have knowledge of regulations like NIS2 EU, DORA, GDPR Have strong knowledge of functional cybersecurity and risk management Have advanced analytical skills Have knowledge ofEBIOS RM methodology Will be an outstanding candidate if you share our values: Positive Thinking, Collaboration, Evolution & Commitment. What are we offering? Evolution: Personal follow-up during your career at CBTW Catalogue with a wide variety of trainings for hard- and soft skills, private language classes, unlimited access to an E-learning platform (Udemy, O'reilly,…) and possibility to get certified every year. Collaboration: On top of the security community, you can join one of the passion communities and practice your hobby or share your interests with other positive thinkers International collaboration, possibility to work worldwide On top of that: Competitive salary with a flexible mobility package (variety of choice between electric cars, electric bikes, payment of rent/mortgage...) You will become part of a growing team of people keen on applying the latest technologies and knowledge. You will be able to work in a dynamic, innovative environment. Do you see a match? We would love to see your application coming in! 😉#LI-YM1

Responsibilities

The role involves defining information security strategies, implementing ISMS, and managing risks and compliance across various regulations. Additionally, the expert will coordinate security incident responses and provide training to raise employee awareness of GRC policies.