Company culture :

Job :

As an IT Security Engineer, you will be responsible for:

IT Security Risk Management:

• Perform regular risk analyses using standard methodologies and those approved by the group.
• Implement risk treatment plans to reduce vulnerabilities.
• Monitor risk performance indicators and propose corrective actions.

Improvement and Implementation of Security Policies:

• Develop, update, and disseminate IT security policies and procedures in collaboration with the group's security teams.
• Ensure compliance with standards (ISO 27001, TISAX, etc.) and local and international regulations (GDPR, Law 09-08, etc.).
• Raise employee awareness of best security practices.

Operational Security Management:

• Coordinate and monitor the management of security incidents jointly with the group SOC and IT support.
• Ensure the deployment of monitoring and control solutions (SIEM, audit tools) for its scope.
• Implement the vulnerability management process, including security audits.
• Manage the IT security dashboard for monitoring non-compliance, incidents, and action plans.

Infrastructure Monitoring and Control:

• Oversee the implementation of security controls in the IT infrastructure (firewalls, antivirus, network monitoring, etc.).
• Regularly evaluate and audit existing security measures.

Participation in IT Projects:

• Collaborate with project teams to integrate security from the design phase of projects (Security by Design approach).
• Participate in project steering committees to ensure alignment with security requirements.

Crisis Management and Business Continuity:

• Develop and test incident response and disaster recovery plans (BCP/DRP).
• Play a key role in managing SI security-related crises.

Required profile :

Education and Experience:

• Master's degree (Bac+5) in IT Security
• Minimum 1 year of experience in IT security

Behavioral Skills:

• Excellent communication skills to simplify security issues for non-technical teams.
• Analytical mindset and rigor in following processes.
• Ability to work in a team and coordinate multiple stakeholders.
• Leadership and decision-making skills in crisis situations.

Technical / Professional Skills:

• Knowledge of security standards and norms (ISO 27001, ISO 27005, TISAX, NIST, etc.).
• Proficiency in security management tools: SIEM, monitoring solutions, vulnerability scanners.
• Knowledge of networks (firewalls, VPN, SD-WAN) and operating systems (Windows, Linux).
• Skills in security incident management and forensic analysis.
• Good understanding of cloud environments (Azure, O365) and associated tools (Intune, SCCM).