Responsibilities:

• Take part in day-to-day IT security operations, including digital certificate issuing, non-personal account support, and incident reporting.
• Respond to and mitigate security incidents, coordinating incident response efforts.
• Collaborate with IT teams to integrate security measures into system designs and implementations.
• Conduct continuous monitoring of IT systems for security threats and vulnerabilities.
• Follow up and support security controls implementation across different IT Risk security domains: Foundations, Identity and Access Management, Change Management, Platform Security, Operational Resilience, and Security Monitoring.
• Participate with the second line of defence in local and third-party risk assessments, including threat assessments, mitigating controls, and risk level evaluations (inherent, current, and residual).
• Support the implementation of new IT regulations such as DORA by performing gap analysis, defining action plans, and implementing or following up.
• Take part in internal and external audits.
• Support other IT security officers in various activities.
• Work with highly collaborative agile teams.
• Maintain good working relations with other bank teams.

Profile:

• Master’s degree in IT Security or related domains.
• At least 5 years of experience in IT security roles (IT security officer, Information Risk Manager, IT Security governance consultant, etc.).
• Relevant certifications such as CISSP, CISM, or similar experience.
• Proficiency in English and conversational knowledge of French.
• Initiative and responsibility-taking ability.
• Adaptability and anticipation skills.
• Effective communication skills for conveying security concepts to both technical and non-technical stakeholders.
• Rigor and precision.
• Experience with standard IT security components: Firewalls, proxies, DLP, Anti-virus, WAF, SIEM, etc.
• Experience with enterprise tools: Office suite, ServiceNow, CMDB tools, etc.
• Scripting knowledge (Perl, Python) for automating recurring tasks.
• Knowledge of standard development practices and tools such as GIT and Azure Pipeline.