Security Assurance Expert
Enregistrez cette offre et organisez votre recherche
Créez un compte gratuit pour enregistrer des offres d'emploi, créer des alertes et revenir à cette liste depuis votre tableau de bord.
Operating mode : Hybrid
Type of contract : Freelance
Start date : ASAP
Level of education required : Bac+5
Looking for a new challenge ? Join Eleveight
We are hiring on behalf of our partner in the technology sector and are looking for a Security Assurance Expert to take on the following responsibilities :
Key Responsibilities:
Security Assurance & Risk Management
· Assess the effectiveness of security controls across IT systems, applications, and third-party services.
· Perform security risk assessments and contribute to risk treatment plans.
· Ensure alignment with internal security policies, group standards, and regulatory requirements (e.g., ISO 27001, NIST, GDPR where applicable).
· Provide security assurance throughout the project lifecycle (design, build, deployment, and operations).
Governance, Compliance & Audits
· Support security audits and assessments.
· Track remediation plans and follow up on security findings until closure.
· Contribute to security governance committees and provide clear security reporting and dashboards.
· Ensure security requirements are integrated into contracts and third-party engagements.
· Review architectures, technical designs, and change requests from a security perspective.
· Validate that security-by-design and security-by-default principles are applied.
· Support go-live security approvals and risk acceptance processes.
Stakeholder Collaboration & Advisory
· Work closely with IT, project managers, architects, risk teams, and business stakeholders.
· Act as a key point of contact for security assurance topics within assigned scope.
· Raise awareness and promote a strong security culture across teams.
Profile required
Professional Experience
· 3–7+ years of experience in information security, cybersecurity, IT risk management, security assurance, or IT governance.
· Proven experience working in large-scale or regulated environments (e.g., financial services, insurance, banking, telecom, or multinational organizations).
· Hands-on experience supporting or leading security assessments, control reviews, and compliance activities.
· Experience collaborating with internal audit, risk, compliance, and external regulators.
Education
• Minimum Bac+5 in Information Security, Computer Science, Information Systems, Engineering, or a related field.
Technical skills:
Solid understanding of:
· Application security (SDLC, secure coding principles, vulnerability management)
· Infrastructure and network security
· Cloud security concepts (IaaS, PaaS, SaaS)
· Identity & Access Management (IAM)
· Ability to interpret architecture diagrams, technical designs, and security tooling outputs.
Certification
• ISO/IEC 27001 Lead Implementer or Lead Auditor
• CISSP, CISM, CRISC, or CCSP
• CISA (particularly for assurance and audit-oriented profiles)
• Cloud security certifications (AWS, Azure, or GCP Security)
• ITIL Foundation or higher (for operational environments)
Work Ethics
· Strong communication and stakeholder management skills, with the ability to challenge constructively.
· Ability to translate technical risks into business-oriented impact and recommendations.
· High level of integrity, independence, and professional judgment.
· Strong organizational skills with the ability to manage multiple initiatives and priorities.
· Due to the sensitive nature of the task, the role holder must have a demonstrated high level of work ethics, secrecy and discretion.
Skills and Abilities :
· Proficiency in French and English, both written and spoken.
· Intercultural sensitivity, flexibility.
· Ability to manage workload, meet deadlines, and use time efficiently.
· Good interpersonal and communication skills, effective teamwork.
· Ability to function in a matrix structure.
About Eleveight
Eleveight is a consulting and recruitment company specializing in tailored talent solutions to support businesses in their transformation.
We connect top experts in Change & Transformation, Business Applications, and Data & AI with ambitious projects, offering opportunities that match their skills and career goals. With our personalized approach and international network, we provide high-quality support throughout the process, ensuring engaging missions and a work environment that fosters professional growth. Join Eleveight and unlock opportunities that recognize your expertise and accelerate your career.