INFORMATION SECURITY MANAGER – GROUPE (H/F) — Edmond de Rothschild

Full description

Attached to the Group's Information Systems Security Officer (ISRS), you contribute to cyber risk management and data protection. You support the technology industries and functions in the implementation of security requirements adapted to the Group's challenges.

Key activities and responsibilities of the Information Security Manager (ISM) Group ISM contributes to the governance of information security and cyber risk management across the Group. As such, its main responsibilities are:

• Contribute to the definition, deployment and evolution of the cybersecurity and data protection governance framework, consistent with the Group's risk appetite and priorities.
• Ensure monitoring of threats, vulnerabilities and regulatory developments, assess impacts and advise stakeholders on action plans.
• Contribute to corporate risk management by overseeing cyber risks, maintaining the control environment and ensuring clear reporting to governance bodies.
• Support the Group's projects and initiatives by conducting security risk analyses, architectural reviews and due diligence assessments with third parties.
• Identify, with business and technological stakeholders, proportionate, pragmatic and aligned risk reduction measures to operational objectives.
• Assess the adequacy and effectiveness of safety measures in relation to applicable regulations, policies, directives, procedures and controls.
• Support the Group ISR in the implementation, piloting and continuous improvement of cybersecurity and data protection programs.

Profile

• Master's degree in cybersecurity, information security, computer science or equivalent training.
• One or more recognized certifications in information security (CISSP, CISM, CRISC or equivalent) and/or data protection are an asset.
• At least five years of experience in cyber risk management, cybersecurity or data protection, as well as a strong understanding of technical issues. Experience in the banking or financial sector is an asset.
• Good control of cybersecurity and control standards, including NIST CSF and ISO/IEC 27001.
• Good understanding of IT architectures, networks, cloud environments and telecommunications.
• Mastering the security principles of public, private and hybrid cloud environments, including shared responsibility models and best practices for securing IaaS, PaaS and SaaS services.
• Experience in the evaluation and implementation of cloud security controls: identity and access management, encryption and key management, logging and monitoring, configuration management, network segmentation and data protection.
• Practical experience in securing Microsoft 365 and Microsoft Azure environments, including Microsoft Entra ID, Microsoft Defender, Microsoft Purview, Azure Policy and Microsoft Sentinel. Control of the configuration of conditional access, management of preferred identities, data protection and monitoring of security events.
• Knowledge of the requirements of financial institutions, including FINMA, CSSF, ACPR, AMF and EBA. Experience in their implementation is an asset.
• High capacity for analysis, learning and adaptation in a rapidly changing environment.
• A high sense of ethics, integrity and confidentiality.
• Rigor, proactivity, precision, focus and excellent organization.
• Excellent relational skills, ability to unite diverse interlocutors and taste for teamwork.
• Current knowledge of English and French, both oral and written.
• Excellent synthesis, communication and writing skills, adapted to technical audiences, trades and managers.
• Ability to coordinate multiple stakeholders and conduct topics independently.

Without news from us within a month, you may consider that your application has not been accepted.

Questions about this listing