- Company Name
- Kbrw
- Job Title
- Responsable sécurité
- Job Description
-
**Job Title:** Security Manager
**Role Summary**
Lead and implement enterprise cybersecurity strategies, enforce compliance with regulatory frameworks (ISO27001, NIS2, SOC2), manage risk and compliance programs, and ensure proactive defense against threats through vulnerability assessments, incident response, and security training.
**Expectations**
3+ years leading security teams. Required certifications: CISSP, CISM, or ISO27001 Lead Implementer. Proven expertise in risk management, compliance, incident response, and enterprise cybersecurity strategies.
**Key Responsibilities**
- Develop and execute risk management processes aligned with organizational objectives.
- Design, maintain, and enforce cybersecurity policies and frameworks (ISO27001, NIS2, SOC2, GDPR).
- Coordinate vulnerability assessments, pentesting, and remediation across infrastructure and applications.
- Manage security audits, incident response plans, and crisis management.
- Deploy and administer security tools, integrating with SOC and IT operations.
- Lead security training programs for employees and cross-functional teams.
- Build and govern cyber risk portfolios, including third-party vendor and supply chain security.
- Define technical security requirements for product development and project delivery.
- Monitor threat intelligence, security metrics, and emerging risks.
- Provide executive reporting, budget planning, and ROI analyses for security initiatives.
**Required Skills**
- Risk and compliance management (ISO27001, NIS2, SOC2, GDPR).
- Cybersecurity strategy development and governance.
- Technical security requirements definition.
- Incident response, vulnerability management, penetration testing.
- Security tools deployment (SIEM, SOAR, cloud architecture).
- Cyber crisis planning and business continuity execution.
- Security KPI design and performance dashboards.
**Required Education & Certifications**
Bachelor’s degree in computer science, cybersecurity, or related field. Required certifications: CISSP, CISM, or ISO27001 Lead Implementer. Familiarity with secure coding standards.