Conseiller senior en sécurité de l’information

Senior Information Security Advisor We are looking for a senior information security advisor to contribute to the securing of technological infrastructures, cloud environments, and information systems for a large organization. The ideal candidate should have extensive expertise in cybersecurity, network security, Windows/Linux systems, and Microsoft Azure and Microsoft 365 environments. The person must also demonstrate a strong understanding of cyber threats, protection and monitoring mechanisms, and major security frameworks such as NIST, ISO 27001, and COBIT. This role is for a very senior expert, capable of analyzing complex technological environments, evaluating security controls, and formulating recommendations tailored to the organization's risks and requirements. Main requirements: Minimum of 15 years of experience in information technology. Minimum of 10 years of experience in information security or a similar role. In-depth knowledge of network technologies and security. Very good knowledge of Linux and Windows operating systems, including: Systems Bastioning Configuration Strengthening (Security Hardening) Environment Securing Very good mastery of Microsoft environment security: Microsoft Azure Microsoft 365 Good knowledge of security logging and monitoring tools. In-depth knowledge of cyber threats, including malware, attack vectors, and attack techniques. In-depth understanding of major security controls: Antivirus

IDS/IPS

Firewall Email Filtering Web Filtering and Blocking Security Patch Management Experience with cloud security tools adapted to public and hybrid environments. In-depth knowledge of security frameworks and standards: NIST Cybersecurity Framework ISO 2700x

COBIT

At least one recognized certification in information security is required:

CISSP

CISM CISA

CRISC

ISO 27001

Or equivalent recognized certification Main responsibilities: Advise IT teams on best practices in information security. Analyze security risks related to infrastructures, networks, and systems. Evaluate the security configurations of Windows and Linux environments. Formulate recommendations regarding systems bastioning and configuration strengthening. Evaluate the protection mechanisms of Azure and Microsoft 365 environments. Analyze the effectiveness of existing security controls and identify possible improvements. Contribute to the identification of vulnerabilities, cyber threats, and attack vectors. Advise teams on detection, logging, and monitoring mechanisms. Participate in improving the security of public and hybrid cloud environments. Ensure the alignment of security practices with NIST, ISO 2700x, and COBIT frameworks. Collaborate with different technical teams to recommend security solutions tailored to the organization's needs. Xideral