Grc Consultant Risk Management

• Definition of the Risk Strategy
• Define, formalise and maintain a structured risk analysis methodology
• Develop and maintain templates, policies, standards, and guidance documents
• Build an service offering for risk analysis activities
• Harmonise practices across teams and ensure alignment with group-wide expectations
• Industrialisation of the Risk Analysis Process
• Design automated workflows for generating risk analyses
• Automate data collection, pre‑population of fields, consolidation and generation of standardised deliverables
• Continuously improve the process to reduce effort, improve quality and increase consistency
• Work closely with customers to integrate business and operational constraints

• Good knowledge of cybersecurity frameworks (ISO 27001, NIST CSF, CIS Controls)
• Skills in IT and security risk management
• Understanding of regulatory requirements: GDPR, DORA, eIDAS, etc.
• Ability to draft policies, procedures, standards, and guidelines
• Ability to coordinate multiple stakeholders (IT, Security, Business teams, HR)
• Strong ability to produce clear and structured deliverables
• Knowledge of CSSF constraints is an asset
• Strong vision and expertise in CyberSecurity processes, especially IT risk analysis
• Affinity with operational process workflows and their optimisation
• Strong rigour and attention to detail
• Proactive mindset and ability to take initiative
• Strong organisational capabilities
• Critical thinking and problem‑solving mindset
• Client‑oriented attitude
• Creativity, innovation, and ability to resolve complex issues
• Ability to synthesise and simplify complex information
• French: read, written, spoken
• English: read, written, spoken
• Bachelor’s/Master’s degree (Computer Science, Cybersecurity, Risk Management, Governance, Audit or equivalent)
• Experience in GRC, cybersecurity, IT risk management, IT audit or compliance

Certifications appreciated: ISO 27001 Lead Implementer / Auditor, ITIL, CISSP, CISM, CISA

• Access to our Sopra Steria training and personal development academy
• A company car lease or mobility budget
• A company laptop and mobile phone
• Private health insurance coverage
• Meal vouchers
• Social security and pension plan
• A competitive salary