Mission
The IT Risk analyst & reporting manager will be actively involved in the 2 following main missions of the Cloud CISO team :
- Maintain cloud cybersecurity risk cartography using tools such as ServiceNow.
- Cyber risk assessments with methods based on ISO 27005.
His role will be to analyze, report, provide a critical eye and to be source of proposal, so he will have to be strongly skilled on cybersecurity.
For this purpose, he will work in close collaboration with the Cloud CISO team based in Paris and a IT Risk Analyst based in Lisbon too.
He will, as well, provide help on the move to third party software by entities, studying & analyzing cases, being stakeholder in risk assessments, following up third party to the IT Risk Analyst & Third Party manager in Lisbon if necessary.
Main Responsibilities:
Maintain cloud cybersecurity risk cartography :
- Follow-up data quality and comprehensiveness in cloud assets referential (Cloud Register) and cloud risks referential (cloud risks in the Risk Register) in ServiceNow tooling
- Build, improve and provide risk reportings templates using ServiceNow or an external tool (such as Tableau)
- Provide periodic cloud risk reportings
- Active role in the preparation of quarterly cloud risk committees
Risk assessments:
- Understand risk assessments already produced (based on ISO 27005/EBIOS Risk Manager) and impacts of remediations plans progresses on risks.
- Skills to follow up/challenge remediation plans implemented by service providers or entities.
- Contribute actively in risk assessments of cloud platforms and cloud applications.
- Ideally, skills to lead risk assessments following on ISO 27005/EBIOS Risk Manager methods.
Other activities:
- Contribute in (cloud) third parties onboarding studies (risk assessment, review of cases studies, …)
- Contribute to governance/organization topics on third party cases.
- Contribute to governance/organization topics related to the team.
- Contribute to follow-up of third-party governance in run
Profil
Technical skills:
- Certification ISO 27001
- Certification ISO 27005 Risk Manager and/or EBIOS Risk Manager
- Knowledge of a risk management tool such as ServiceNow or reporting tool such as Tableau
- Knowledge on Cloud specific Cyber Security (such as SOC2, CSA, ISO27017)
- Knowledge on Cyber Security control frameworks (such as NIST, CIS)
- Knowledge in project management
- English (Mandatory)
- French (nice to have)
Soft skills:
- Collaborative skills, and the ability to communicate information
- Excellent written and verbal communication skills.
- Ability to take pragmatic decisions in a changing world, in consistency with the strategic view.
- Must be a critical thinker, with strong problem-solving skills.
Présentation du groupe
Acteur de référence des systèmes d’information augmentés par l’intégration stratégique de la data, Consort Group accompagne depuis plus de 30 ans les entreprises pour leur permettre de valoriser leurs patrimoines données et informatiques à leur plein potentiel.
Intégrer Consort Group, c’est faire partie de communautés d’experts où partage, développement, transmission et entre-aide riment avec engagement et accompagnement.
Consort Portugal
En 2021, Consort Group crée Consort Portugal et s’installe à Porto, en plein centre-ville pour :
- Accompagner les stratégies d’offshoring de ses clients, notamment européens ;
- Proposer aux acteurs économiques portugais les expertises de ses 2 communautés : Consortis, leader des services managés aux infrastructures et Consortia, expert Data, Développement digital et Ingénierie Médias.
Les équipes bénéficient d’un environnement d’excellence, tant en termes d’infrastructure que de formation, les standards étant ceux d’offres en offshoring de référence (Digital Workplace, Sécurité, Supervison, Virtualisation…)
Une ambiance conviviale règne au sein de l’agence, favorisant proximité, partage, apprentissage et implication dans une organisation résolue engagée dans la société portugaise.
Pour en savoir plus www.consort-group.com/portugal/