Information Security Governance Consultant FRANCE

Role Overview

We are seeking an Information Security Governance Consultant to support organizations in defining structuring and implementing their information security governance frameworks.

This role focuses on helping clients strengthen their security strategy assess control maturity manage risks and ensure compliance with international standards and regulations.

Key Responsibilities

• Define and structure organizational information security strategies

• Establish governance frameworks policies and procedures

• Conduct information security maturity assessments and audits

• Identify assess and manage information security risks

• Advise on risk treatment and control implementation

• Support resilience initiatives (BCP DRP incident management cyber crisis management)

• Ensure cloud security governance alignment

• Provide regulatory and standards compliance support (GDPR ISO 27001 NIST CSF CIS Controls CSSF SWIFT etc.)

• Contribute to governance activities in SCADA environments when applicable

• Provide CISO advisory support or assume interim CISO responsibilities when required

• Translate governance requirements into practical and business-aligned security measures

Requirements

• Engineering degree or equivalent qualification

• Strong understanding of governance-based security approaches

• Familiarity with SCADA environments

• Solid knowledge of security frameworks and standards (ISO 27001 NIST CSF CIS Controls SWIFT etc.)

• Structured risk management approach

• Experience in implementing security controls

• Certifications such as CISSP CISM ISO 27001 Lead Implementer/Auditor ISO 27005 Risk Manager are a strong plus

• French: Fluent (C1C2 required)

• English: Minimum B1 level

Candidate Profile

• Strong interest in Information Security Governance

• Excellent communication skills with various stakeholders (Management CISO IT Business teams)

• Strong analytical and writing skills

• Structured organized and pragmatic mindset

• Strategic thinking with the ability to maintain a long-term perspective

• Proactive independent and solution-oriented

• Keen to stay updated on cybersecurity trends and emerging threats

• Motivated and highly engaged