EXALT SHIELD

About the Company

eXalt Shield vous embarque pour une aventure cyber-securisee ! Renforcez votre defense numerique, boostez votre resilience et embrassez la conformite avec style.
Nous accompagnons nos clients sur l'ensemble des phases des projets : audit, pilotage et realisation de mises a niveau, amelioration continue et integration de la securite et de la conformite dans les nouveaux projets.

Les consultants d'eXalt Shield interviennent aupres des DSI, des RSSI, des Directeurs des Risques et de la Conformite ou dans les directions dediees a la gouvernance des donnees pour mener des projets de mise en conformite reglementaire (RGPD, HDS, PCI-DSS, EBA, DORA, AIA,...) et de production de garanties de securite (PAS, certifications ISO 27001, ISO 22301...).

Conscients que la cybersecurite et la conformite participent a la creation d'une societe numerique de confiance, nos consultants promeuvent et diffusent chez nos clients les bonnes pratiques de l'ethique du numerique.

Listed Jobs

Company Name

EXALT SHIELD

Job Title

Consultant ISP - Intégration Sécurité dans les Projets

Job Description

**Job Title** ISP Security Integration Consultant **Role Summary** Drive the systematic inclusion of cybersecurity throughout project lifecycles, ensuring risk-informed design, compliance, and continuous improvement. Collaborate with project, Agile, and governance teams to embed Security‑by‑Design principles and deliver resilient digital transformations. **Expectations** - Demonstrated expertise in cyber risk analysis and ISP methodologies (ISO 27005, EBIOS RM, NIST CSF). - Proficiency in integrating security into Agile/SAFe workflows and cloud architectures. - Ability to communicate complex security concepts clearly to technical and non‑technical stakeholders. - Commitment to ongoing monitoring, KPI reporting, and remediation planning for sustained security posture. **Key Responsibilities** - Conduct cyber risk assessments and threat‑mapping using ISO 27005, EBIOS RM, and NIST CSF frameworks. - Incorporate Security‑by‑Design into project plans, architecture, and deliverables. - Produce security studies, architectural recommendations, and remediation action plans. - Mentor Agile/SAFe teams on cyber‑security best practices and governance requirements. - Define, track, and report security KPIs to steering committees and executive sponsors. - Maintain and update security documentation, threat models, and risk registers. **Required Skills** - Advanced knowledge of ISO 27001/27005, EBIOS RM, NIST CSF, and related risk frameworks. - Experience with cloud security across AWS, Azure, and GCP environments. - Strong understanding of Security‑by‑Design architecture and secure application development. - Familiarity with regulatory requirements such as NIS2, DORA, and LPM. - Excellent written and oral communication, including facilitation and training. - Analytical mindset with the ability to synthesize complex information into actionable insights. - Fluent in English (written and spoken). **Required Education & Certifications** - Bachelor’s degree in Computer Science, Information Security, or related field (advanced degree preferred). - Professional certifications highly regarded: ISO 27001 Lead Implementer, CRISC, CISSP, or equivalent.

Île-de-france, France

On site

Junior

01-12-2025