Cybersecurity Risk Analyst Specialist

Job Description

Job Description:

In an international environment undergoing significant transformation of IT delivery and technology usage, driven by strategic partnerships, cloud adoption, infrastructure outsourcing, and business service digitalization, seeks a Cybersecurity Risk Analyst Specialist to support and shape critical initiatives.

The role forms part of a modern and agile architecture team, committed to continuous reassessment and innovation. Solutions developed will directly impact over 110,000 employees across the globe.

About The Role:

The Cybersecurity Risk Analyst role is to facilitate the implementation of a comprehensive risk-based approach. This includes the steps of risk assessment, risk treatment framing, and risk acceptance process handling.

Liaison with Third Party Risk Management, Governance, and Compliance teams will be essential, in order to assess the level of security of critical applications, produce executive reports on the recommendations identified, and establish security plans to be implemented and monitored.

The Cybersecurity Risk Analyst reports to the Cyber Risk Manager.

Responsibilities:

• Be the referent analyst for one or several Business Lines (Shipping, Ships, Logistics, Transport, Corporate Functions, Media, Innovation)
• Perform security risk assessments following ISO 27005/EBIOS RM methodology
• Ensure Risk Assessments are documented and communicated as relevant to technical stakeholders and understandable to non-technical audiences.
• Review security architectures, cloud & networks integration for critical application ecosystems
• Identify security objectives & define remediation plans in regard to security policies or standards
• Act as a technical expert with cybersecurity & IT stakeholders
• Act as a functional expert/evangelist with Business stakeholders
• Be a key contributor or project lead for framework enhancement, maturity level improvement, KRIs/KPIs dashboarding reporting
• Evaluate if appropriate controls are in place and oversee/create action plans
• Advise stakeholders on how to apply the relevant remediation’s and assist with solutions to support it.
• Support security initiatives deliveries as needed and track progress with compliance team.
• Evangelize cybersecurity risk-based approach and communicate around best practices
• Develop and maintain close working relationships with GRC teams, Architecture Security teams and IT stakeholders.
• Build and maintain a cybersecurity Risk Register with strategic & operational risks identification and scoring on your defined scope
• Build and maintain a cybersecurity Risk Map based on the Risk Register on your defined scope

Qualifications & Profile:

Education:

• Bachelor or Master degree in Cybersecurity, Computer Science, Information Technology or equivalent

Knowledge & Experience:

• You have 3 to 5 years of experience in a similar role or GRC related (IT audit, risk management or advisory, etc.)
• You hold one or more relevant industry certifications, including but not limited to:
• Risk Manager ISO 27005
• EBIOS RM
• NIST CSF
• Certificate of Cloud Security Knowledge (CCSK)
• Certified Information Systems Security Professional (CISSP)
• ISO 27001 Lead auditor or Lead Implementer
• Certified Information System Auditor (CISA)
• Certified Cloud Security Professional (CCSP)
• Certified Ethical Hacker (CEH)

Soft Skills:

• Excellent verbal, written and interpersonal communication skills.
• Ability to adapt communication language depending on the audience (technical to non-technical with businesspeople & top management)
• Knowledge Management driven
• Highly self-motivated with keen attention to detail.
• Analytical skills, pragmatic approach to IT and OT security issues
• Planning, organization and coordination skills
• Ability to properly manage time and priorities
• Team spirit, efficiency, structured mindset, quality driven and results oriented
• Ability to identify and address complex problems into pragmatic solutions
• Ability to work in an international environment, in contact with multicultural teams
• Ability to synthetize complex topic & problematics
• Fluent English mandatory, French is a plus.