Cybersecurity Program Analyst

You want to join a company that places people at the heart of its concerns? We are waiting for you at Extia!

Extia is an engineering consultancy which proposes since 2007 an unprecedented approach in its sector by combining well-being and performance at work. A successful model: more than 3000 Extians working in 22 agencies in France and abroad, 1st Great Place To Work® in France, 160 millions of euros of turnover and plenty of energy!

At Extia, it's "First who, then what" so, let's do it!

First who:

• Cybersecurity professional with experience in cybersecurity governance, maturity assessments, IT risk, or security programs
• Good understanding of IT security, cybersecurity frameworks, risk management, and regulatory requirements
• Knowledge of cybersecurity topics such as IT continuity and backup management, network security, or cryptography is appreciated
• Familiarity with NIST or equivalent cybersecurity frameworks
• Strong analytical skills, with the ability to assess evidence, identify gaps, and evaluate security maturity
• Strong communicator, comfortable interacting with international stakeholders, IT teams, cybersecurity experts, and senior management

Then what:

What You'll Do:

• Deploy the cybersecurity maturity evaluation process across entities within your perimeter
• Support entities in understanding Group cybersecurity requirements and the evidence expected from them
• Review and assess evidence submitted by entities, ensuring consistent and coherent assessments across the Group
• Identify maturity gaps, cybersecurity risks, and areas requiring improvement
• Communicate and inform entities about changes to cybersecurity requirements, frameworks, and regulatory expectations
• Facilitate collaboration between IT providers, cybersecurity teams, and Group entities
• Document assessment results and prepare reporting for Cyber Program governance
• Develop a transversal understanding of cybersecurity and IT risk topics
• Contribute to internal projects aimed at improving and enhancing the maturity evaluation process
• Continuously develop your expertise across different areas of cybersecurity, IT risk, governance, and regulatory compliance

What We're Looking For:

• Experience in Cybersecurity, Information Security, IT Risk, Governance, or Security Assessment
• Good knowledge of cybersecurity frameworks, ideally NIST or an equivalent standard
• General understanding of IT infrastructure, IT security, key IT processes, and regulatory frameworks
• Knowledge of risk management and cybersecurity risk awareness
• Exposure to IT continuity and backup management, including DORA requirements, is a plus
• Knowledge of cryptography, key and certificate management, or CKMS is a plus
• Knowledge of network security, micro-segmentation, or network hardening is a plus
• Strong analytical, communication, and stakeholder management skills
• Fluent English is mandatory; French is a plus