The IT Security Officer supports the organisation's cybersecurity posture by enforcing security controls, performing security assessments, reviewing architectures, tracking vulnerabilities, and ensuring compliance with standards such as ISO 27001 and NIS. The contractor acts as a key security contact for IT teams and projects.
Missions
Security assessments (applications, systems, products): review security, identify recommendations and define remediations.
Vulnerability management and remediation follow‑up : review vulnerabilities, define priorities and support IT teams
Knowledge of security frameworks: ISO 27001, NIST, OWASP, MITRE ATT&CK
Security controls implementation & configuration reviews : participate to security architecture review and define recommendations
Coordination of penetration tests and audit support : record audit findings, coordinate action plan with IT teams and provide regular Status.
Ability to interpret technical documentation and assess security risks.
Profile
Minimum one of the following:
ISO 27001 Lead Implementer or Lead Auditor
CompTIA Security+
CISSP or CISM (strong asset)
Microsoft Security (SC‑200/SC‑300)
Optional: Cysa+, GIAC certifications