Pam Project Manager

• Leading weekly follow-up meetings and monthly steering committees
• Preparing and presenting clear progress reports on activities, risks, and performance indicators
• Coordinating various contributors and stakeholders (product teams, Cyber Defense, etc.)
• Organizing and leading workshops to assess risks related to new technologies (e.g., Google Cloud, Microsoft 365, agentic AI solutions)
• Formalizing risk assessments based on recognized frameworks (e.g., MITRE ATT&CK, STRIDE)
• Proposing relevant security measures and controls to mitigate identified risks
• Leading the review and update cycles for the PAM Permit Book
• Organizing presentation sessions to promote its adoption within the Group's entities
• Designing an effective deployment process, potentially through the X learning catalog
• Conducting studies to identify future PAM needs and use cases
• Drafting the first version of the 2027 PAM vision, including priorities, activities, and a budget proposal
• Developing a Position Paper on the impact of artificial intelligence on privileged access management

• Significant experience (5+ years) in project or program management within the cybersecurity field
• Proven experience in security governance, ideally on Identity and Access Management (IAM) and Privileged Access Management (PAM) topics
• Excellent knowledge of the concepts and challenges of Privileged Access Management (PAM)
• Proficiency in security risk assessment methodologies (knowledge of MITRE ATT&CK or STRIDE frameworks is a plus)
• Good understanding of various technical environments: Cloud (Azure, AWS, GCP), servers (Linux, Windows), databases, and CI/CD tools
• Ability to write clear and pragmatic governance documents (policies, standards, guidelines)
• Excellent leadership and the ability to autonomously manage complex projects
• Strong interpersonal skills and the ability to communicate effectively with both technical and non-technical stakeholders at all levels of the organization
• A strategic mindset, with the ability to anticipate developments and build a long-term vision
• Fluency in both English and French (spoken and written) is essential for working in an international context

knowledge of MITRE ATT&CK or STRIDE frameworks