Senior Cybersecurity Governance Consultant

Our client is seeking a Senior Cybersecurity Governance Consultant to strengthen its Information Security (IS) governance framework and support the integration of cybersecurity requirements across projects, operations, and business initiatives.

Working within a large-scale IT environment, you will act as a key stakeholder between security, IT, product, and business teams, ensuring that cybersecurity principles are embedded throughout the project lifecycle and operational activities.

This is a long-term assignment based in Paris La Défense. The first three months require full on-site presence to ensure effective knowledge transfer, onboarding, and collaboration with internal teams.

Responsibilities Cybersecurity Governance & Risk Management

• Produce, analyze, and consolidate cybersecurity KPIs and dashboards.
• Support internal and external security audits, controls, and compliance activities.
• Track remediation plans and monitor corrective actions.
• Contribute to cybersecurity maturity assessments and governance reporting.
• Prepare and facilitate cybersecurity steering committees and governance meetings.

Security by Design & Project Security

• Support projects throughout their lifecycle to ensure Security by Design principles are applied.
• Perform or contribute to cybersecurity risk assessments.
• Define and review security requirements and controls.
• Support security testing, validation activities, and exception management.
• Monitor residual risks and associated mitigation plans.

Operational Security

• Manage and track security exceptions and risk acceptances.
• Coordinate vulnerability management activities with technical teams.
• Participate in Change Advisory Boards (CAB) from a security perspective.
• Contribute to security incident management and post-incident reviews.
• Support access reviews and privileged account governance.

• Minimum 7 years of experience in Cybersecurity Governance, Information Security, Risk Management, or Security Consulting.
• Strong expertise in:
• Cybersecurity Governance (GRC)
• Security Risk Management
• Security by Design
• Vulnerability Management
• Security Audits & Compliance
• Security Operations Governance
• Experience working in complex enterprise or regulated environments.
• Strong stakeholder management and communication skills.
• Ability to drive governance initiatives across multiple teams and departments.
• Excellent reporting, analytical, and organizational skills.
• Autonomous, structured, and delivery-oriented mindset.

Nice to Have

• ISO 27001, NIST, EBIOS RM, or equivalent frameworks.
• Financial Services, Banking, Insurance, or Large Enterprise experience.
• Exposure to IAM, PAM, Cloud Security, or Security Operations.