HCLTech is a global technology company, spread across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. We re powered by our people a global, diverse, multi-generational talent - representing 161 nationalities whose unique spark, perspective and boundless passion drive our culture of proactive value creation and problem-solving.

Our purpose is to bring together the best of technology and our people to supercharge progress for everyone, everywhere our clients, partners, their stakeholders, communities, and the planet. As a company, we are deeply focused on accelerating our ESG agenda. We are also creating technology-enabled sustainable solutions with and for our clients and partners. We embed ESG imperatives into every aspect of our business and ensure that the progress we supercharge is responsible, inclusive and beneficial to all our stakeholders in the long term. We have committed to achieving net zero by 2040.

To learn more about how we can supercharge progress for you, visit www.hcltech.com

Location- Paris, France

Hybrid mode- 3 days week (Work from client location)

Language - French + English

Domain

Cybersecurity Architecture, Risk Management, Network Security, Cloud Security

Total experience: 10+ years

Relevant experience: Minimum 8 years in Cybersecurity Architecture

Job Description

Experience:

• Ideally 10 years in cybersecurity projects management (cybersecurity architecture and solutions deployment/management in international scope).
• Proven experience in information security, with a focus on security operations, risk management and compliance.

The Client wishes to contract a profile who will take responsibility for the Cybersecurity Foundation (Infrastructure) team.

1. Functional area

• Manage the team of 8 (onshore/offshore) on the scope of Systems, Network and Data security. Lead team meetings, ensure the overall planning and distribution of the achievable commitments.
• Report on assigned scope directly to Global CISO team members.
• Work with GSC (core infrastructure, infrastructure management services) counterparts and contribute to convergence projects on their IT’s infrastructure.
• Operate the IT’s secured service infrastructure and lead Foundation security services.
• Design Cybersecurity Foundation Strategy and operations to contribute to security service.
• Ensure compliance of cybersecurity foundation scope to SG Group policies and standards and to regulatory requirements.
• Monitor on a regular basis infrastructure anomalies, vulnerabilities and risks.
• Contribute to security risk identification and assessment for risks in relation to infrastructure.
• Cooperate, challenge, advise and align with GSC on common standards, methods, tools.
• Work closely with the technical teams, the SOC and the CERT to ensure that the expected activities (identify duplication and inefficiency on infrastructure services, reduce complexity, propose cost savings) are in place for the managed scope.

2. List of actions

• Manage the team of cybersecurity foundation scope
• Ensure compliance to SG Group policies and standards and to regulatory requirements.
• Monitor on a regular basis infrastructure anomalies, vulnerabilities and risks.
• Contribute to security risk identification, assessment and remediation for risks in relation to infrastructure.
• Cooperate, challenge, advise and align with GSC on common standards, methods, tools.
• Work closely with the technical teams, the SOC and the CERT to ensure expected activities are in place.
• Identify duplication and inefficiency on infrastructure services, reduce complexity, propose cost savings.
• Report to the integration alignment & security foundations roadmap.
• Contribute to awareness, training and documentation for SG Group entities.
• Contribute to the remediation process.

3. Technologies

• Cybersecurity solutions and tools:
• Public Cloud Security (Azure / AWS)
• WAF (CloudProtector, FrontDoor)
• Firewalls (Cisco, Checkpoint, Fortinet)
• AntiVirus (Symantec)
• Asset and Vulnerability Management (Qualys, Tanium…)
• Data Leakage Prevention (Symantec)
• Encryption & PKI
• System hardening