Security consultant Migration CSPM /Anglais courant (H/F)

1. Service Scope (not limited to): The primary objective of this mission is to drive the migration of security policies and the deployment of the new CSPM solution across entities.

CSPM deployment phases: Preparation, Execution, Validation, and Run Phase.

Description of main activities within the service: ? Coordinate with Group Security (Security & Product teams) to ensure controls are correctly migrated and that resulting security scoring is accurate

? Coordinate with Cloud product teams and IT stakeholders to ensure the solution?s operational usability

? Migrate the existing scope covering all Azure and AWS accounts across entities

? Provide technical reference and subject-matter expertise related to the CSPM solution

? Contribute to the design of operational target processes for run-mode deployment (including onboarding of new public cloud accounts) to ensure adequate risk coverage

? Produce comprehensive documentation covering operational processes and transition to run mode, ? Apply in-depth knowledge of Azure and AWS cloud environments

? Apply recognized security control frameworks (CIS, NIST)

? Identify and structure requirements necessary to build and operate an effective CSPM service

? Interpret security requirements and ensure their coverage through the selected CSPM solution

Expertise confirmée en DevOps, sécurité et environnements Cloud, incluant la mise en ?uvre et l?exploitation de solutions CSPM.

Maîtrise avancée des plateformes Cloud publiques Azure et AWS.

Solide compréhension des contrôles de sécurité Cloud et des référentiels de référence (CIS, NIST).

Capacité à structurer, documenter et industrialiser des processus de sécurité au sein d?écosystèmes Cloud complexes.

Qualifications requisesMinimum de 5 années d?expérience professionnelle en DevOps technique, sécurité et environnements Cloud publics, avec une expérience démontrée dans la mise en ?uvre ou l?exploitation de services CSPM ou de solutions équivalentes de sécurité Cloud.

Required Expertise: ? Proven expertise in technical DevOps, security, and cloud environments, including CSPM implementation and operation.

? Strong proficiency in public cloud platforms (Azure and AWS).

? Advanced understanding of cloud security controls and industry frameworks (CIS, NIST).

? Ability to structure, document, and operationalize security processes within complex cloud ecosystems.

Service Qualifications: Minimum of 5 years of professional expertise in technical DevOps, security, and public cloud environments, with demonstrated involvement in CSPM or similar cloud security services.

Afin de soutenir les objectifs métiers et les initiatives de transformation digitale, le client met en place une pratique dédiée à la sécurité de l?information afin d?assurer une réponse coordonnée face à l?augmentation des menaces de cybersécurité dans les environnements Cloud publics.

L?approche de sécurité de l?information vise à protéger les parties prenantes en sécurisant les actifs informationnels, en maîtrisant les risques cyber et en permettant la mise en ?uvre de stratégies métiers efficaces et efficientes, soutenues par la direction exécutive et déployées à travers les différentes entités.

Dans le cadre de cette stratégie, le client a décidé de remplacer la solution existante de Cloud Security Posture Management (CSPM).

To support business objectives and digital transformation initiatives, the client is establishing a dedicated information security practice to ensure a coordinated response to the growing cybersecurity threats within Public Cloud environments.

The information security approach aims to protect stakeholders by securing information assets, managing cyber risks, and enabling effective and efficient business strategies sponsored by executive leadership and supported across entities.

As part of this strategy, the client has decided to replace the existing Cloud Security Posture Management (CSPM) solution.