Caisse d'Epargne CEPAC

About the Company

Banque régionale, La caisse d'Epargne Provence-Alpes-Corse s'engage auprès de ses collaborateurs, de ses clients, de ses sociétaires mais également en prenant part activement à la vie locale. La Caisse d'Epargne Provence-Alpes-Corse est un banque tournée vers demain. Elle s'étend sur 9 départements: les bouches du Rhône, le Vaucluse, les Alpes de haute Provence, les Hautes Alpes, la Haute Corse, la Corse du sud, La Réunion, la Guadeloupe et la Martinique. Ses 2 750 collaborateurs et son réseau de 268 agences se mobilisent au service de plus de 2 millions de clients. La Caisse d'Epargne Provence Alpes Corse allie la diversité de ses territoires à la proximité avec tous ses clients et à la disponibilité de tous ses collaborateurs. https://youtu.be/yPRAN0ES2jI?list=PLPmRWa30PrDRYDVckQXbqkr0uZGQWwFK-

Listed Jobs

Company Name

Caisse d'Epargne CEPAC

Job Title

Chargé(e) de Contrôles des risques informatiques et technologiques (F/H)

Job Description

**Job title:** Information Technology and Cyber Risk Control Officer (F/M) **Role Summary:** Serve as a second‑line controller of technology and cyber risk for an enterprise, supporting the Chief Technical Risk Manager (C‑TRM) and the Compliance & Permanent Control Directorate. Lead risk assessments, develop risk maps, and oversee remediation and security testing. Ensure regulatory compliance (GDPR, ISO, etc.) and contribute to security awareness, crisis management, and resilience initiatives. **Expactations:** - Deliver independent, accurate risk evaluations and second‑line controls. - Maintain up‑to‑date risk registers and mitigation plans. - Communicate risk findings and security guidance to cross‑functional teams. - Coordinate with DPO and regulatory bodies to ensure compliance. **Key Responsibilities:** - Conduct second‑line risk reviews of IT and cyber risks. - Create and update technology‑risk maps and vulnerability inventories. - Analyse risk impact, integrate security into project lifecycles. - Monitor remediation progress and action‑plan implementation. - Oversee penetration tests, security audits, and incident response readiness. - Prepare briefing materials for security committees and senior management. - Advise on prevention measures against cyber attacks and fraud. - Maintain awareness of regulatory changes (GDPR, ISO, industry standards). **Required Skills:** - Strong analytical and risk‑analysis methodology knowledge. - Proficiency in information‑security frameworks (ISO 27001/27002, NIST, etc.). - Experience with cyber risk assessment and mitigation. - Ability to synthesize complex technical information for non‑technical stakeholders. - Excellent communication, stakeholder management, and teamwork. - Prioritisation, project management, and detail orientation. **Required Education & Certifications:** - Bachelor’s or Master’s degree in Computer Science, Information Security, or Risk Management. - Professional certifications such as CISSP, CISM, CRISC, or ISO 27001 Lead Implementer are highly desirable.

Marseille, France

On site

17-12-2025