Trouvez votre prochaine offre d’emploi ou de mission freelance ISO 27001

Information Security Manager with Network Engineering Skills Our Client is bank based in Central London who are looking to recruit a seasoned professional with at least 7 to 10 years expertise level Information Security coupled with Hands-on Network Engineering. The role is mainly Information Security – Data Security and split circa 80% with 20% Network Engineering – so you do need to be hands-on technically. You will ideally have circa 5+ years of work experience with Network Engineering coupled with over 10 years experience with Cisco Systems Products Role Description The Information Security Manager with Network Engineering Skills is a full-time hybrid role based in London, with the flexibility to work from home part of the week. The role oversees the design, implementation, and continuous improvement of information security policies, procedures, and controls across networks and systems. Day-to-day responsibilities include managing the Information Security Management System (ISMS), monitoring cybersecurity and network security events, coordinating incident response, and ensuring compliance with relevant standards and regulations. The person in this role will collaborate with IT and business stakeholders to assess risks, implement technical and procedural safeguards, and support secure network architecture and configuration. Additional tasks include producing security documentation, leading security awareness initiatives, and providing guidance on secure network engineering practices. Qualifications Strong skills in Information Security Management and Information Security, with experience defining and enforcing security policies and governance. Hands-on expertise with Information Security Management Systems (ISMS), including implementation, maintenance, and audit readiness. Proficiency in Cybersecurity and Network Security, covering threat detection, vulnerability management, network hardening, and incident response. Demonstrated network engineering experience (e.g., routing, switching, firewalls, VPNs, secure network design). Relevant certifications such as CISSP, CISM, CISA, CompTIA Security+, or similar are beneficial. Experience with regulatory and compliance frameworks (e.g., ISO 27001, GDPR, NIST) and security best practices. Ability to analyze complex technical environments, communicate clearly with both technical and non-technical stakeholders, and document security requirements and processes. Bachelor's degree in computer science, information security, engineering, or a related field, or equivalent professional experience. Key Networking Skills Required: Cisco Network Switches Layer 2 and 3 (Catalyst 9K) – CCNP Level, Expert Level Preferred Routing protocol – OSPF (Catalyst 9K) – CCNP Level, Expert Level Preferred Cisco Switch Stacking (Cat 9K Switches 9600, 9300. 9200) Virtual Routing and Forwarding – (Catalyst 9600) Internetworking Troubleshooting - CCNP Level, Expert Level Preferred High Availability and Disaster Recovery - CCNP Level, Expert Level Preferred Security/Cyber Security Skills Required: Cisco Firepower Firewalls (ASA, FTD) - CCNP Level, Expert Level Preferred Palo Alto Firewalls – Specialist Level, Architect Level Preferred Cisco Layer 2 Port Security Network Access Control including Cisco ISE, TACACS etc Network Detection and Response Network Encryption (Site to Site VPN's) Cisco Secure Client (ASA) Network IPS (Trellix) Network Zero Day (Trellix NX or similar) Host Zero Day (Trellix HX or similar) Cyber Security Network Control Incident Investigation with the assistance of group cyber security experts – Tier 1, Tier 2 to 3 preferred, using LogRhythm SIEM a bonus Host End Point Protection (Symantec) Host IPS Preferred Skills and Knowledge Vulnerability Management (Scanning for Vulnerabilities and classifying the risk, CIS Benchmark Scanning and compliance) – Using Rapid7 a bonus Knowledge of Penetration Testing, understanding of the types of testing and their advantages and disadvantages Security Zone Design and considerations Network and Security Architecture Design and Considerations Understanding of Information Security (Confidentiality, Integrity, Availability), MITRE ATT&CK, NIST, ISO 27001, SIEM use cases for key controls etc Risk Management in Cyber Security, SSL Blind spots, what causes them and how to mitigate Malware/Ransomware and how to mitigate along with Penetration testing concepts Understanding of White/Black/Grey Box penetration testing. Developing Security policies and procedures and conducting audits/risk assessments Handling crisis situations during security incidents The role is hybrid 3 days in the office in Central London. The salary for this role will be in the range £85K - £100K + Benefits. Do send your CV to us in Word format along with your salary and notice period.

Contexte de la missionDans le cadre du développement d'une offre Platform as a Service (PaaS), nous recherchons un Ingénieur DevOps Services Cloud pour concevoir, développer et industrialiser des services Cloud managés sur la plateforme interne. Le consultant contribuera à la mise en place de services XaaS (Kubernetes as a Service, PostgreSQL, MongoDB, etc.) en collaboration avec les équipes Cloud, DevOps et SRE, tout en garantissant des solutions sécurisées, évolutives et conformes aux exigences ISO 27001 et HDS. Vos missionsConcevoir, développer et déployer des services PaaS/XaaS sur la plateforme Cloud interne. Développer un système agentique pour la conception de l'offre PaaS. Assurer l'intégration et l'interopérabilité des services avec les plateformes existantes (Morpheus, OpenStack). Développer et personnaliser des API en Go. Concevoir et intégrer des opérateurs Kubernetes. Industrialiser les déploiements via des pipelines CI/CD. Automatiser les déploiements avec Helm et Ansible. Intégrer les solutions aux outils de monitoring, logging et alerting. Garantir la sécurité des services Cloud conformément aux normes ISO 27001 et HDS. Produire et maintenir la documentation technique. Accompagner les équipes dans l'exploitation et l'évolution des services Cloud. Exploiter les solutions d'IA comme levier de productivité dans les processus de développement et d'automatisation. Livrables attendusConception et développement de l'offre PaaS. Déploiement des services Cloud managés. Intégration des services au SI Docaposte. Automatisation des déploiements CI/CD. Documentation technique. Mise en œuvre de solutions utilisant l'IA pour améliorer la productivité. Compétences indispensablesGo. Cloud (OpenStack, VMware). Kubernetes. Docker. Helm. Ansible. Linux / Unix. CI/CD (GitLab CI). Développement d'opérateurs Kubernetes. Français courant. Compétences appréciéesMorpheus CMP. RKE2 / Rancher. PostgreSQL. MongoDB. Nexus. Prometheus. Grafana. Solutions de logging centralisé. API REST. Sécurité Cloud. OpenStack. IA appliquée à l'automatisation et à la productivité. Soft SkillsExcellente capacité d'analyse et de résolution de problèmes. Autonomie et esprit d'initiative. Esprit d'équipe et collaboration transverse. Bonnes capacités de communication. Rigueur et sens de l'organisation. Orientation amélioration continue. Curiosité technologique et appétence pour les environnements Cloud innovants.

Qui sommes-nous ?Artemys, acteur de la transformation numérique est une entreprise à taille humaine, avec plus de 30 ans d'expérience composée de plusieurs entités, chacune spécialisée dans leur domaine (Système, data, réseaux/sécu…) Ce qui nous distingue vraiment ? Ce n'est pas de dire que nous valorisons nos collaborateurs, c'est de le montrer chaque jour. Chez Artemys, l'humain est au cœur de tout ce que nous faisons. Nos valeurs, concrètes et vécues au quotidien : Convivialité : travailler dans une bonne ambiance, ça change tout Proximité : chaque membre de l'équipe a sa place et sa voix Écoute : vos idées comptent autant que votre travail Artemys Paris, située dans le 10ᵉ arrondissement, est une entité spécialisée en infrastructures systèmes. Forte de 36 ans d'expertise, elle accompagne les entreprises, principalement implantées en Ile-de-France, dans leur transformation digitale. C'est au sein de cette entité, la plus ancienne du groupe, que l'aventure a débuté. Au fil des années, Artemys a su fidéliser une clientèle exigeante de Grands Comptes, certains clients accompagnant l'entreprise depuis sa création, dans des secteurs variés. Reconnue pour son exigence technique et ses valeurs humaines, elle est aujourd'hui un acteur clé des Infrastructures, Cloud et Modern Workplace. Votre mission (si vous l'acceptez) : Dans le cadre d'un programme de transformation majeur chez l'un de nos clients Grands Comptes, nous recherchons un Chef de Projet Senior Transformation Cloud / Hosting capable de prendre le lead sur plusieurs projets d'infrastructures. Vous interviendrez notamment pour : Cadrer et piloter plusieurs projets de transformation Cloud / Hosting, depuis la définition du périmètre jusqu'à leur mise en œuvre. Participer à la définition d'une nouvelle offre de Hosting Cloud et accompagner son déploiement auprès des différentes entités. Piloter les évolutions des environnements Azure, notamment autour des Azure Managed DevOps Pools, de la gestion des bases de données ou encore des modèles RBAC. Construire et piloter les plans d'évolution des environnements serveurs Microsoft, notamment autour des montées de versions Windows Server et SQL Server. Définir, documenter et mettre en œuvre un PRA / DRP sur Azure, notamment dans un contexte de démarche ISO 27001. Recueillir les besoins, challenger les orientations et accompagner les décideurs dans leurs choix. Préparer et animer les kick-offs, comités de pilotage et réunions projets. Coordonner les différentes équipes techniques et métiers afin de garantir le respect des délais, budgets et niveaux de qualité attendus Le terrain de jeu ? Vous évoluerez dans un environnement infrastructures / Cloud à forte dimension internationale : Microsoft Azure AWS Environnements Hosting / Datacenter Windows Server Microsoft SQL Server Database Management / Redgate PRA / DRP Project Management Plan (PMP) Le profil que nous recherchons : Vous disposez d'une solide expérience en chefferie de projet infrastructures / Cloud, idéalement dans un environnement Grand Compte. Vous êtes avant tout un Chef de Projet Senior / Leader : vous savez cadrer un projet, structurer une gouvernance, arbitrer, coordonner et embarquer les différentes parties prenantes. Vous possédez suffisamment de background technique Cloud / Infrastructure pour challenger les équipes et comprendre les enjeux autour d'Azure, AWS, Hosting et des environnements Microsoft. Vous êtes habitué à piloter des projets complexes impliquant plusieurs équipes, métiers et décideurs. Une expérience dans un contexte international est indispensable. Vous disposez d'un anglais courant à l'oral comme à l'écrit. Le process pour nous rejoindre : simple et clair ! Échange RH : On discute de vos motivations et de l'adéquation avec nos valeurs (promis, pas de robotisation ici). Échange opérationnel : Je propose votre candidature au référent (Commercial, SDM, coordinateur…) du compte client, qui échange ensuite avec vous afin de valider votre adéquation avec le besoin. Proposition de mission : Si tout colle, on propose votre CV à notre client ! Conditions de mission: Statut : Indépendant / Freelance TJM : Entre 600€ et 700€ (Selon votre expertise) Localisation : Nanterre Télétravail : Jusqu'à 2 jours par semaine Démarrage : ASAP Durée : 6 mois minimum Bienvenue dans l'aventure ARTEMYS Chez nous, chaque talent compte. Peu importe votre âge, vos origines, votre identité, votre religion ou votre orientation : ce qui nous intéresse, c'est vous et ce que vous avez à apporter. On s'engage à répondre à toutes les candidatures sous 72 heures, parce qu'on sait combien l'attente peut être stressante. Et ici, l'inclusion n'est pas qu'un mot : tous nos postes sont ouverts aux personnes en situation de handicap, et on fait tout pour créer un environnement où chacun peut s'épanouir. Prêt, feu, candidatez !

Information Security Manager with Network Engineering Skills Our Client is bank based in Central London who are looking to recruit a seasoned professional with at least 7 to 10 years expertise level Information Security coupled with Hands-on Network Engineering. The role is mainly Information Security – Data Security and split circa 80% with 20% Network Engineering – so you do need to be hands-on technically. You will ideally have circa 5+ years of work experience with Network Engineering coupled with over 10 years experience with Cisco Systems Products Role Description The Information Security Manager with Network Engineering Skills is a full-time hybrid role based in London, with the flexibility to work from home part of the week. The role oversees the design, implementation, and continuous improvement of information security policies, procedures, and controls across networks and systems. Day-to-day responsibilities include managing the Information Security Management System (ISMS), monitoring cybersecurity and network security events, coordinating incident response, and ensuring compliance with relevant standards and regulations. The person in this role will collaborate with IT and business stakeholders to assess risks, implement technical and procedural safeguards, and support secure network architecture and configuration. Additional tasks include producing security documentation, leading security awareness initiatives, and providing guidance on secure network engineering practices. Qualifications Strong skills in Information Security Management and Information Security, with experience defining and enforcing security policies and governance. Hands-on expertise with Information Security Management Systems (ISMS), including implementation, maintenance, and audit readiness. Proficiency in Cybersecurity and Network Security, covering threat detection, vulnerability management, network hardening, and incident response. Demonstrated network engineering experience (e.g., routing, switching, firewalls, VPNs, secure network design). Relevant certifications such as CISSP, CISM, CISA, CompTIA Security+, or similar are beneficial. Experience with regulatory and compliance frameworks (e.g., ISO 27001, GDPR, NIST) and security best practices. Ability to analyze complex technical environments, communicate clearly with both technical and non-technical stakeholders, and document security requirements and processes. Bachelor's degree in computer science, information security, engineering, or a related field, or equivalent professional experience. Key Networking Skills Required: Cisco Network Switches Layer 2 and 3 (Catalyst 9K) – CCNP Level, Expert Level Preferred Routing protocol – OSPF (Catalyst 9K) – CCNP Level, Expert Level Preferred Cisco Switch Stacking (Cat 9K Switches 9600, 9300. 9200) Virtual Routing and Forwarding – (Catalyst 9600) Internetworking Troubleshooting - CCNP Level, Expert Level Preferred High Availability and Disaster Recovery - CCNP Level, Expert Level Preferred Security/Cyber Security Skills Required: Cisco Firepower Firewalls (ASA, FTD) - CCNP Level, Expert Level Preferred Palo Alto Firewalls – Specialist Level, Architect Level Preferred Cisco Layer 2 Port Security Network Access Control including Cisco ISE, TACACS etc Network Detection and Response Network Encryption (Site to Site VPN's) Cisco Secure Client (ASA) Network IPS (Trellix) Network Zero Day (Trellix NX or similar) Host Zero Day (Trellix HX or similar) Cyber Security Network Control Incident Investigation with the assistance of group cyber security experts – Tier 1, Tier 2 to 3 preferred, using LogRhythm SIEM a bonus Host End Point Protection (Symantec) Host IPS Preferred Skills and Knowledge Vulnerability Management (Scanning for Vulnerabilities and classifying the risk, CIS Benchmark Scanning and compliance) – Using Rapid7 a bonus Knowledge of Penetration Testing, understanding of the types of testing and their advantages and disadvantages Security Zone Design and considerations Network and Security Architecture Design and Considerations Understanding of Information Security (Confidentiality, Integrity, Availability), MITRE ATT&CK, NIST, ISO 27001, SIEM use cases for key controls etc Risk Management in Cyber Security, SSL Blind spots, what causes them and how to mitigate Malware/Ransomware and how to mitigate along with Penetration testing concepts Understanding of White/Black/Grey Box penetration testing. Developing Security policies and procedures and conducting audits/risk assessments Handling crisis situations during security incidents The role is hybrid 3 days in the office in Central London. The rate for this role will be in the range £500 pd to £650 pd. This is a 3 month assignment. Do send your CV to us in Word format along with your salary and notice period.

IT Operations Platforms and Security Lead In summary the Client is looking to recruit an all-round individual with expert knowledge and hands-on experience of IT Infrastructure coupled with Security, Compliance & Risk Management You must have upwards of 10 years hands-on expertise in IT Infrastructure combined with Security and Risk – ideally from within the banking or insurance sector. The IT Operational Platform and Security Lead is responsible for overseeing the organisation's IT operations, ensuring the stability, continuity, security, and efficiency of its technology platforms within a global commercial insurance environment. While Microsoft technologies (Microsoft 365, Azure, Exchange Online) form a core part of the infrastructure, the role also encompasses broader enterprise IT systems, multi layered networking, security, data management, and third-party platforms that support global business operations and the associated applications estate. The role requires a proactive leader who can drive IT operational excellence, manage security risks, focus on continual service improvement, drive transformational delivery projects, and work effectively with internal stakeholders and third-party vendors to deliver a high-quality Global IT services. Working in line with the Architecture defined IT principle of a "buy before build" environment, the individual will need to ensure that outsourced and cloud-based services are robust, cost-effective, and aligned with business needs and the Strategic IT vision. They will also play a key role in enhancing cybersecurity, protecting data and systems, driving transformative operational change, enhancing IT processes and ensuring compliance with governance bodies and industry regulations. Due to the nature of the role, complexity of the estate, current transformation activities and team size, the role requires the functional capability and proficiency to technically augment the team capabilities (when required) and have a detailed knowledge of technical IT support roles/services as a requirement, across multiple technical areas. Security, Compliance & Risk Management Define and enforce cloud security policies, identity management, and access controls to protect systems, networks, and data. Oversee the adoption of zero-trust security principles to enhance protection across cloud platforms. Manage identity and access management (IAM) in a cloud-first environment, including Azure AD, MFA, Conditional Access, SSO, and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Conduct regular security risk assessments, penetration tests, and vulnerability management across cloud services. Oversee endpoint security, cloud network and API security for robust protection across all assets Define, manage and maintain accurate DR and BCP plans for the infrastructure area with biannual tests. Technical Experience Microsoft Azure Infrastructure design and administration, including topology, Azure networking, services, and component knowledge, Microsoft AD (Entra), Server and SQL experience, O365 administration and design Global Software Patching and estate management via Intune Firewall (Azure, CheckPoint and Cloudflare), DNS, VPN, WIFI and Local Area Network design & administration experience Software Defined Networking (Cisco, Meraki, Versa) Key Skills Microsoft 365 & Azure: Strong experience managing Microsoft 365 (Exchange, SharePoint, Teams), Azure cloud infrastructure, and security tools such as Microsoft Defender and Sentinel. Security & Compliance: Deep knowledge of security frameworks (ISO 27001, NIST, CIS), compliance requirements (GDPR, SOC2), and risk management best practices. Identity & Access Management (IAM): Expertise in Azure AD, MFA, Conditional Access, Single Sign-On (SSO), and Privileged Access Management (PAM). Threat Management & Incident Response: Ability to detect, respond to, and mitigate cyber threats using SIEM, endpoint security, and vulnerability management tools. Networking & Infrastructure Security: Understanding of firewalls, VPNs, SD-WAN, DNS security, endpoint protection, and cloud security controls. IT Service Management & Automation: Experience implementing ITIL-based service management, automating operational tasks, and optimising service delivery. Operational & Leadership Skills: IT Operations & Service Continuity: Ability to ensure IT systems are highly available, resilient, and fit for purpose, with a strong focus on business continuity and disaster recovery. Supplier & Vendor Management: Experience managing third-party IT vendors, MSPs, and SaaS providers, ensuring service levels, performance, and cost-effectiveness. Project Leadership & Change Management: Ability to lead technology projects, system upgrades, and platform migrations, ensuring smooth execution and minimal business disruption. Process Improvement & Automation: Strong analytical mindset to identify inefficiencies, automate workflows, and enhance security controls. Skills & Mindset: Problem-Solving & Decision-Making: Capable of making informed decisions and resolving complex IT issues in a fast-paced environment. Stakeholder Engagement: Ability to communicate effectively with technical and non-technical stakeholders, including senior leadership and business users. Resilience & Adaptability: Comfortable working in an evolving technology landscape, with a proactive and security-first approach. The Client is a financial organisation based in the City of London. This is a hybrid position with 3 days in the office. Must have a Bachelor's degree in IT or similar. The salary for this role will be in the range £85K - £95K plus Benefits. Do send your CV to us in Word format along with your salary and notice period.

IT Operations Platforms and Security Lead This role requires excellent management of a small team in IT along with managing stakeholders and vendors. You must be hands-on technically in IT Infrastructure. The IT Operational Platform and Security Lead is responsible for overseeing the organisation's IT operations, ensuring the stability, continuity, security, and efficiency of its technology platforms within a global commercial insurance environment. While Microsoft technologies (Microsoft 365, Azure, Exchange Online) form a core part of the infrastructure, the role also encompasses broader enterprise IT systems, multi layered networking, security, data management, and third-party platforms that support global business operations and the associated applications estate. The role requires a proactive leader who can drive IT operational excellence, manage security risks, focus on continual service improvement, drive transformational delivery projects, and work effectively with internal stakeholders and third-party vendors to deliver a high-quality Global IT services. Working in line with the Architecture defined IT principle of a "buy before build" environment, the individual will need to ensure that outsourced and cloud-based services are robust, cost-effective, and aligned with business needs and the Strategic IT vision. They will also play a key role in enhancing cybersecurity, protecting data and systems, driving transformative operational change, enhancing IT processes and ensuring compliance with governance bodies and industry regulations. Due to the nature of the role, complexity Security, Compliance & Risk Management Define and enforce cloud security policies, identity management, and access controls to protect systems, networks, and data. Oversee the adoption of zero-trust security principles to enhance protection across cloud platforms. Manage identity and access management (IAM) in a cloud-first environment, including Azure AD, MFA, Conditional Access, SSO, and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Conduct regular security risk assessments, penetration tests, and vulnerability management across cloud services. Oversee endpoint security, cloud network and API security for robust protection across all assets Define, manage and maintain accurate DR and BCP plans for the infrastructure area with biannual tests. Technical Experience Microsoft Azure Infrastructure design and administration, including topology, Azure networking, services, and component knowledge, Microsoft AD (Entra), Server and SQL experience, O365 administration and design Global Software Patching and estate management via Intune Firewall (Azure, CheckPoint and Cloudflare), DNS, VPN, WIFI and Local Area Network design & administration experience Software Defined Networking (Cisco, Meraki, Versa) Key Skills Microsoft 365 & Azure: Strong experience managing Microsoft 365 (Exchange, SharePoint, Teams), Azure cloud infrastructure, and security tools such as Microsoft Defender and Sentinel. Security & Compliance: Deep knowledge of security frameworks (ISO 27001, NIST, CIS), compliance requirements (GDPR, SOC2), and risk management best practices. Identity & Access Management (IAM): Expertise in Azure AD, MFA, Conditional Access, Single Sign-On (SSO), and Privileged Access Management (PAM). Threat Management & Incident Response: Ability to detect, respond to, and mitigate cyber threats using SIEM, endpoint security, and vulnerability management tools. Networking & Infrastructure Security: Understanding of firewalls, VPNs, SD-WAN, DNS security, endpoint protection, and cloud security controls. IT Service Management & Automation: Experience implementing ITIL-based service management, automating operational tasks, and optimising service delivery. Operational & Leadership Skills: IT Operations & Service Continuity: Ability to ensure IT systems are highly available, resilient, and fit for purpose, with a strong focus on business continuity and disaster recovery. Supplier & Vendor Management: Experience managing third-party IT vendors, MSPs, and SaaS providers, ensuring service levels, performance, and cost-effectiveness. Project Leadership & Change Management: Ability to lead technology projects, system upgrades, and platform migrations, ensuring smooth execution and minimal business disruption. Process Improvement & Automation: Strong analytical mindset to identify inefficiencies, automate workflows, and enhance security controls. Soft Skills & Mindset: Problem-Solving & Decision-Making: Capable of making informed decisions and resolving complex IT issues in a fast-paced environment. Stakeholder Engagement: Ability to communicate effectively with technical and non-technical stakeholders, including senior leadership and business users. Resilience & Adaptability: Comfortable working in an evolving technology landscape, with a proactive and security-first approach. Summary of Skills Required: Global Enterprise level Infrastructure Management position for the last 5 years, Global team management (human resources, strategic delivery, operational service, audit lead for Infra, budget..) Key - 3 party operational infrastructure vendor management - i.e management of managed service partners, Migration of Legacy VM based estates to SaaS and Cloud services platforms, Legacy tech to Azure knowledge/experience, Prior to the last 5 years, a technical infrastructure engineering level background, working on Windows Server, AD , SQL environments, Firewalls/SDWAN, and Networks (WAN &/or LAN). The Client is based in the City of London. This is a hybrid position with 3 days in the office. The salary for this role will be in the range £85K - £100K plus Benefits. Do send your CV to us in Word format along with your salary and notice period.

Missions : Dans le cadre du renforcement de son équipe Cybersécurité, notre client recherche un(e) Analyste Cybersécurité SOC / DevSecOps. Vous serez au cœur du dispositif de sécurité de l'entreprise avec pour mission de piloter les activités opérationnelles du SOC, renforcer les contrôles de sécurité et accompagner les projets de transformation cybersécurité. Vous interviendrez en étroite collaboration avec le RSSI, les équipes Infrastructure, Réseau, Système et Développement. Responsabilités : Piloter les activités opérationnelles du SOC et contribuer à son évolution. Développer et optimiser les règles de détection au sein du SIEM, tout en intégrant de nouvelles sources de données. Analyser et traiter les alertes de sécurité issues des solutions EDR et Microsoft 365. Participer aux investigations de sécurité et accompagner les collaborateurs dans le traitement des emails ou comportements suspects. Réaliser les revues d'habilitations et la gestion des droits en collaboration avec les équipes DevSecOps. Contribuer à l'analyse des audits de sécurité et au suivi des plans d'actions associés. Participer à la gestion des accès privilégiés et des environnements sécurisés. Accompagner les projets cybersécurité à venir, notamment autour des solutions SASE. Environnement technique : SIEM Sekoia EDR SentinelOne & Defender O365 Cloud AWS Ticketing Jira, Documentation Confluence Bonus : Terraform & Git / PowerShell / Bash Profil et compétences : Expérience significative en cybersécurité opérationnelle, SOC ou Blue Team. Bonne connaissance des environnements SIEM, EDR et Microsoft 365. Sens de l'analyse, rigueur et esprit d'équipe. Force de proposition et capacité à gérer les situations sensibles. Connaissance des normes ISO 27001, ISO 27005 et NIS2.

Dans un contexte d'accélération de la transformation digitale, de multiplication des échanges de données et d'évolution des menaces cyber, le groupe renforce sa Direction Cybersécurité afin de sécuriser ses infrastructures, ses applications métiers, ses entrepôts connectés et ses données stratégiques. Contexte de la missionAu sein de la DSI Groupe, vous participerez à la définition, à la mise en œuvre et à l'amélioration continue de la stratégie cybersécurité de l'entreprise. Vous interviendrez sur un environnement complexe intégrant notamment : ERP SAP WMS TMS Portails Clients Cloud Azure Réseaux multi-sites Infrastructures logistiques et industrielles Missions principalesGouvernance & CybersécuritéParticiper à la stratégie de cybersécurité du groupe. Réaliser des analyses de risque. Accompagner les projets IT sur les aspects sécurité. Mettre en œuvre les politiques de sécurité. Sécurité des infrastructuresSécuriser les environnements réseaux et systèmes. Réaliser les revues de sécurité. Participer à l'administration des solutions de sécurité. Assurer le suivi des vulnérabilités. Gestion des incidentsParticiper au traitement des incidents de cybersécurité. Contribuer aux plans de remédiation. Collaborer avec les équipes SOC et infrastructure. ConformitéAccompagner les audits internes et externes. Participer aux démarches ISO 27001. Veiller au respect des exigences réglementaires. SensibilisationAccompagner les utilisateurs sur les bonnes pratiques. Participer aux actions de sensibilisation cyber. Environnement TechniqueSécuritéMicrosoft Defender Sentinel EDR SIEM IAM MFA PKI CloudMicrosoft Azure, AWS, GCP, Privé RéseauxFirewall VPN IDS / IPS Segmentation réseau Applications MétiersSAP WMS TMS Applications Supply Chain