Ingénieur GRC H/F
Core
Conduct risk analyses, define and implement security policies, and support business units in risk mapping and compliance management.
Role type
Senior GRC Engineer (Cybersecurity)
Builds
Risk management frameworks, security policies, and compliance artifacts for enterprise clients.
Domain
Cybersecurity / Risk Management / Compliance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Risk analysis (EBIOS RM, ISO 27005, MEHARI), Security policy definition (ISO 27001, NIS2, DORA), Risk mapping, Compliance implementation (RGPD, PCA/PRA), Stakeholder communication, User awareness training
Preferred skills
ISO 27001 Lead Implementer, EBIOS RM, CRISC, CISSP, GRC tools (Risk Manager, OneTrust)
Technologies
Risk Manager, OneTrust
Responsibilities
Perform risk analyses using EBIOS RM, ISO 27005, and MEHARI frameworks; Define and implement security policies aligned with ISO 27001, NIS2, and DORA; Support business units in risk mapping and management; Participate in setting up compliance devices for RGPD and PCA/PRA; Produce clear deliverables for CISOs, CIOs, and business leaders; Contribute to user awareness initiatives for cybersecurity.
Seniority
Senior, hands-on IC