Cyber Security Consultant

JO DESCRIPTION :

Technical experience

At least 5 years of relevant experience (mandatory)

• Proven technical and hands-on experience in cybersecurity, vulnerability assessment, monitoring tools, logging tools, access management tools.
• Strong knowledge of cloud security, third-party risk management, and penetration testing methodologies.
• IT risk management, or operational resilience within financial services.
• Strong knowledge of DORA (Digital Operational Resilience Act) and other relevant regulations such as NIS2, GDPR, EBA/ECB ICT risk guidelines, and ISO 27001/27005.
• Experience with cyber risk assessments, business continuity planning (BCP), disaster recovery (DR), and incident response.
• Familiarity with cybersecurity frameworks (NIST, CIS, ISO 27001, MITRE ATT&CK).
• Ability to engage with regulators, auditors, and senior stakeholders to explain compliance strategies.

Business experience : mandatory

• Proven experience in developing and writing clear information security processes and (work) procedures (customizing from BNPP Group policies and procedures).
• Experience in working together with third-party suppliers.
• Good communication skills - both written and orally, and adapted to the audience.
• Good presentation skills to bring the messages across in a simple and understandable manner (PPT, oral, ...)