Data & Risk Management Specialist

Human and technology to scale sustainable performance

Founded in 1989, Scalian is a French group with an international dimension, with offices in Europe and North America, specializing in business transformation through its dual mastery of business processes and digital technologies.

In the TOP10 engineering consulting companies in France, the Group is involved in service activities in the management of industrial projects, supply chain (costs, quality, deadlines, performance), architecture and development of embedded digital systems, computer systems applications. Information and Artificial Intelligence.

Scalian also deploys solutions for optimizing projects or the performance of organizations and responds to the challenges of transformation for leaders in industry and the tertiary sector (energy, transport, space, banking, health, environment, etc.)

Are you a Data & Risk Management Specialist looking for a new challenge?

If you want to expand your reach and share your knowledge with a team of professionals, contribute to the development of your colleagues' or Clients' skills, want to consolidate your expertise and grow on innovative projects, this is your opportunity!

What this experience will bring you

First of all, an interesting technical challenge but also an overview of our Client's projects.

We will build your career together and accompany you towards the development of new skills and technical leadership.

What will your role be?

We are looking for a Data & Risk Management Specialist to perform the following activities:

Soft skills

- Problem solving
- Good communication skills
- Goal-oriented approach
- Self-Driven
- Proactive to solution
- Teamwork

Languages

- French
- English (fluent, oral and written)

Responsibilities

Define and maintain the Cybersecurity Risk Management Framework.; Coordinate Cyber Risk Assessments and maintain the Cyber Risk Register.; Identify, assess and monitor cybersecurity risks and residual risks.; Define and monitor risk appetite, tolerance thresholds and mitigation plans.; Challenge risk treatment plans proposed by technical teams.; Integrate third-party and IT project risks into the cybersecurity risk framework.; Prepare KPI/KRI dashboards and reporting for the CISO and Risk Committee.; Support NIS2, ISO 27001 and regulatory audits and compliance activities.

Requirements

5+ years of experience in IT Risk, Cyber Risk or Information Security Governance.; Strong experience in cybersecurity risk assessment and management.; Good knowledge of NIS2 and ISO 27001, ISO 27005 is a plus.; Experience with GRC tools.; Strong analytical, reporting and communication skills.; Ability to challenge technical stakeholders and communicate risks to non-technical audiences.