Security Assurance Expert

Position 
Position based in : Rabat
Operating mode : Hybrid
Type of contract : Freelance
Start date : ASAP
Level of education required : Bac+5
 
Job description

Looking for a new challenge ? Join Eleveight

We are hiring on behalf of our partner in the technology sector and are looking for a Security Assurance Expert to take on the following responsibilities :

Key Responsibilities:

Security Assurance & Risk Management

· Assess the effectiveness of security controls across IT systems, applications, and third-party services.

· Perform security risk assessments and contribute to risk treatment plans.

· Ensure alignment with internal security policies, group standards, and regulatory requirements (e.g., ISO 27001, NIST, GDPR where applicable).

· Provide security assurance throughout the project lifecycle (design, build, deployment, and operations).

Governance, Compliance & Audits

· Support security audits and assessments.

· Track remediation plans and follow up on security findings until closure.

· Contribute to security governance committees and provide clear security reporting and dashboards.

· Ensure security requirements are integrated into contracts and third-party engagements.

· Review architectures, technical designs, and change requests from a security perspective.

· Validate that security-by-design and security-by-default principles are applied.

· Support go-live security approvals and risk acceptance processes.

Stakeholder Collaboration & Advisory

· Work closely with IT, project managers, architects, risk teams, and business stakeholders.

· Act as a key point of contact for security assurance topics within assigned scope.

· Raise awareness and promote a strong security culture across teams.

Profile required

Professional Experience

· 3–7+ years of experience in information security, cybersecurity, IT risk management, security assurance, or IT governance.

· Proven experience working in large-scale or regulated environments (e.g., financial services, insurance, banking, telecom, or multinational organizations).

· Hands-on experience supporting or leading security assessments, control reviews, and compliance activities.

· Experience collaborating with internal audit, risk, compliance, and external regulators.

Education

• Minimum Bac+5 in Information Security, Computer Science, Information Systems, Engineering, or a related field.

Technical skills:

Solid understanding of:

· Application security (SDLC, secure coding principles, vulnerability management)

· Infrastructure and network security

· Cloud security concepts (IaaS, PaaS, SaaS)

· Identity & Access Management (IAM)

· Ability to interpret architecture diagrams, technical designs, and security tooling outputs.

Certification

• ISO/IEC 27001 Lead Implementer or Lead Auditor

• CISSP, CISM, CRISC, or CCSP

• CISA (particularly for assurance and audit-oriented profiles)

• Cloud security certifications (AWS, Azure, or GCP Security)

• ITIL Foundation or higher (for operational environments)

Work Ethics

· Strong communication and stakeholder management skills, with the ability to challenge constructively.

· Ability to translate technical risks into business-oriented impact and recommendations.

· High level of integrity, independence, and professional judgment.

· Strong organizational skills with the ability to manage multiple initiatives and priorities.

· Due to the sensitive nature of the task, the role holder must have a demonstrated high level of work ethics, secrecy and discretion.

Skills and Abilities : 

· Proficiency in French and English, both written and spoken.

· Intercultural sensitivity, flexibility.

· Ability to manage workload, meet deadlines, and use time efficiently.

· Good interpersonal and communication skills, effective teamwork.

· Ability to function in a matrix structure.

About Eleveight

Eleveight is a consulting and recruitment company specializing in tailored talent solutions to support businesses in their transformation.

We connect top experts in Change & Transformation, Business Applications, and Data & AI with ambitious projects, offering opportunities that match their skills and career goals. With our personalized approach and international network, we provide high-quality support throughout the process, ensuring engaging missions and a work environment that fosters professional growth. Join Eleveight and unlock opportunities that recognize your expertise and accelerate your career.

 

---