We are looking for an Assistant CISO with 7 to 8 years of experience in cybersecurity, with a strong focus on Governance, Risk, and Compliance (GRC).

You will operate at the heart of complex organizations, supporting the CISO in steering, structuring, and continuously improving cybersecurity.

Your responsibilities

• Support the CISO in defining and implementing the cybersecurity strategy.

• Contribute to the management of the ISMS and the maintenance of compliance: ISO 27001, NIS2, GDPR, PCI-DSS, etc.

• Perform risk analyses (EBIOS RM or equivalent) and follow remediation plans.

• Draft and maintain security documentation: policies, standards, procedures, guidelines.

• Lead or co-lead cross-functional security projects: IAM, awareness programs, hardening, audits, etc.

• Ensure incident follow-up in coordination with technical teams (SOC / CERT).

• Contribute to cybersecurity reporting, dashboards, and key indicators (KPI / KRI).

• Participate in employee awareness initiatives and help animate the internal security network.

Required skills

• 7 to 8 years of experience in GRC and/or cybersecurity governance roles.

• Strong knowledge of frameworks and regulations: ISO 27001, NIST, NIS2, GDPR, CIS, etc.

• Hands-on experience with risk analysis methodologies (EBIOS RM, MEHARI, ISO 27005, etc.).

• Excellent writing and interpersonal skills.

• Ability to operate in complex environments and manage multiple topics in parallel.

• Operational English.

• No security clearance required.

Location & contract

• Permanent contract – Île-de-France

• On-site presence depending on client needs.

• Start date: immediate or according to notice period.

Languages

• Fluent English & French

We are looking for an SOC Analyst N2 to strengthen our operational security team within a demanding environment strongly focused on detection and response. The position requires a security clearance (or eligibility to obtain one).

Your responsibilities

• Analyze, qualify, and escalate N2 security alerts.

• Conduct in-depth incident investigations: event correlation, log analysis, IoCs, TTPs, and use of the MITRE ATT&CK framework.

• Contribute to incident response and propose appropriate remediation actions.

• Participate in the creation, improvement, and optimization of use cases, detection rules, and automations.

• Maintain and enrich SOC SOPs and procedures.

• Draft structured and actionable incident reports.

• Work closely with N1, N3, and potentially CERT / CSIRT teams.

Technical environment

• SIEM: Splunk

• SOAR: Cortex XSOAR

• EDR/XDR: Cortex

• IDS/IPS, sandboxing, vulnerability scanners

• Frameworks: MITRE ATT&CK, NIST, ISO 27035

Required profile

• Proven experience as an SOC N2 analyst (minimum 2 years).

• Strong understanding of network architectures, logs, threats, and attack/defense techniques.

• Ability to conduct investigations with method and rigor.

• Strong communication skills, analytical mindset, and solid writing abilities.

• Security clearance required (or eligibility).

Location & contract

• Permanent contract – Île-de-France

• Regular on-site presence depending on operational constraints.

• Start date: as soon as possible.

Languages

• Fluent English & French