Job Duties:

The Information Security Specialist (Mid-Level) is responsible for implementing security controls aligned with ISO & NIST framework, ensuring operational security effectiveness across infrastructure, cloud, and applications, supporting risk management activities and contributing to audit and compliance initiatives. The role combines operational security execution with developing governance exposure.

Responsibilities:

• Manage vulnerability life cycle, scanning, prioritization, and remediation tracking.
•  Conduct access reviews and support IAM governance activities.
• Monitor and investigate SIEM alerts and security events.
• Support privileged account onboarding and service account governance.
• Participate in incident response investigations and root cause analysis.
• Perform enterprise risk assessments and residual risk evaluation
• Maintain risk register updates.
• Conduct third-party risk assessments.
• Prepare audit evidence and track remediation actions.
• Develop and maintain security policies and procedures.
• Report risk posture to management
• Support ISO 27001 control implementation and monitoring.
• Ensure continuous compliance and control maturity improvement.
• Secure cloud workloads (Azure/AWS) and review configurations.

Education, Experience and Qualifications:

• 3–6 years of experience in cybersecurity or related IT security roles.
• Certifications: ISO27001 Lead implementer, CISM, CISSP, CRICS.
• Secure cloud workloads (Azure/AWS) and review configurations.
• Strong knowledge of IAM, SIEM, EDR, PAM.
• Experience with cloud security and endpoint protection.
• Experience working within ISO 27001 certified or NIST-aligned environments.
• Understanding of risk management, audit processes and compliance concepts.
• Strong analytical and documentation skills.
• Experience interacting with auditors and regulators.
• French and English.