Security Pentest Consultant - Casablanca

Company :

Orange Business is the entity of the Orange Group that supports companies and organizations in their digital transformation. With 29,100 employees worldwide, we combine global presence and local approach to invent new business models with our clients to unleash their full potential. Thus, we create a positive impact, both for their business and for the world around them.

What sets us apart from our competitors? Our dual expertise: we are both a network operator and a digital solutions integrator. As an operator, we build and operate complex infrastructures. As an integrator, we design and manage end-to-end digital solutions.

We provide our clients with solutions around 5 major transversal challenges: setting up their digital workspace, improving their customer experience, facilitating the rise of Industry 4.0, collecting and processing data, transforming and securing their network infrastructure.

It is because Orange Business masters all the stages of digital transformation that we offer our clients the most relevant solutions.

We imagine an amazing future with our clients and our employees!

So, ready to join the adventure? 

Company culture :

Orange Business stands out for its strongly collaborative culture, placing people, trust and collective engagement at the heart of its operations. The company promotes close and supportive management, fostering autonomy, accountability and continuous skills development within a caring work environment. This collaborative foundation is reinforced by a significant innovation component, encouraging creativity, initiative and agility across teams. Structured processes support operational efficiency, while performance objectives are integrated in a balanced and sustainable way.

Job :

You will join the Consulting & Audit team of Orange Cyberdefense in Morocco as an Experienced Consultant to support our clients in securing their IT systems, particularly with large accounts (private, public) in the Maghreb and West Africa.

As such, your main missions consist of:

• Conducting risk analyses (EBIOS, MEHARI, etc.)
• Implementing and reviewing ISMS ISO 27001,
• Developing Security Policies, operational security procedures, standards, etc.
• Assisting with compliance (law 09.08, DNSSI, ISO27001-2, GDPR, etc.),
• Implementing & raising awareness of the DevSecOps approach
• Reviewing Cloud security measures
• Defining cyber defense strategies / IT Security Master Plan
• Reviewing architecture security
• Designing and auditing IT continuity and backup (ISO 22301)
• Raising security awareness
• Presenting results at various hierarchical levels
• Providing advice and recommendations tailored to the security problems encountered by clients.
• Maintaining and testing audit methodologies

Required profile :

You have a Master's degree (Bac+5) from an Engineering school and have 2 to 5 years of experience in cybersecurity.

You have strong knowledge in our areas of activity. You are a team player, you show initiative and autonomy, you have good interpersonal skills and a sense of responsibility. You express yourself both orally and in writing in French and English.

Obtaining an information security certification is a plus.

Head office address :

Desired personality traits :

Need for autonomy Need for reflection Ambition Involvement at work Search for new things / novelty