Cybersecurity Consultant

Long-term contract: initially till end of 2026 + 12 month extension in phase 2

Daily rate: €600
Experience: minimum 6-7 years in cybersecurity
Start date: June ASAP
Location: Paris - on site presence required 2 to 3 days per week

Context & Objective

The client aims to strengthen its cybersecurity posture by onboarding a consultant integrated into the Corporate Cybersecurity team.
The consultant will support both cyber governance and operational cybersecurity, working closely with Corporate IT teams and local site IT teams.
Client is looking for a single, primarily technical point of contact, with a potential GRC profile as backup.

Scope of the Assignment (2 Workstreams)

1. Governance/Project Management (2 days per week)
Risk analysis and definition of cybersecurity requirements for projects
Management of cybersecurity projects and initiatives
Follow up of audit remediation plans
Update and maintenance of cybersecurity governance documentation
2. Operational Cybersecurity (3 days per week)
Vulnerability and security incident management
Handling operational cybersecurity requests (exemptions, Firewall rule openings, etc.)
Update of operational processes and procedures
Industrialization of security controls (MDI, MDE, vulnerability scanning - Greenbone)
Definition and monitoring of KPIs, notably through ServiceNow

Expected Profile - Key Requirements:

Experienced Cybersecurity Consultant with a strong operational focus
Solid knowledge of standards and frameworks: ISO 27001, NIST, GDPR, NIS2
Strong understanding of network and cloud environments (Azure), Windows/Microsoft 365, and security solutions (IAM, MFA, EDR, encryption, etc.)
Experience with Active Directory-related topics and security incident handling
Comfortable working in a cross functional environment, with strong communication skills
ServiceNow experience
Good level of English