FORMIND

About the Company

Formind est un leader Français indépendant expert en cybersécurité.

Nous accompagnons plus de 500 clients (dont de nombreux grands comptes) issus de multiples secteurs d'activités: Banques, Assurances, Utilities, Industrie, Transport, Santé, Retail....

Nos interlocuteurs, essentiellement DSI, RSSI, Risk Managers et Directions de l’audit et du contrôle, Direction Conformité, apprécient notre double compétence technique et métier.
Formind poursuit sa croissance et maintient un objectif de 500 personnes à horizon 2025.

Formind connaît une forte croissance en développant ses expertises en : - Gouvernance Cyber (stratégie, gestion des risques, pilotage et contrôle) et continuité/résilience - Conformité légale, réglementaire et normative - Expertise technique (architecture, Cloud, IAM, OT, …) et intégration de solutions - Audits techniques – sûreté – redteam, Services managés (SOC, vulnérabilités) et gestion d’incident (FIR) - Formation.

En cas d'accident : Force d'Intervention Rapide
fir[arobase]formind.fr
01..81..89..30..02

Vous êtes convaincus que la sécurité constitue un levier de performance business pour les entreprises ?
Rejoignez-nous !

Plus d'infos sur www.formind.fr

Listed Jobs

Company Name

FORMIND

Job Title

Consultant(e) senior GRC

Job Description

**Job Title** Senior GRC Consultant **Role Summary** Provide strategic governance, risk and compliance (GRC) services to clients, including risk mapping, security strategy definition, policy development, audit and compliance, and resilience planning. Contribute to pre‑sales activities, knowledge‑sharing, tooling, and training to strengthen the firm’s cyber‑security offering. **Expectations** - Minimum 3 + years of hands‑on experience in cyber‑security/GRC with proven delivery of risk analyses, security policies, governance frameworks, or compliance audits. - Strong written and oral communication in English and French, with leadership and analytical rigor. - Ability to work collaboratively in a team, mentor peers, and challenge own expertise. **Key Responsibilities** - Develop and maintain risk cartographies and perform detailed risk analyses. - Design and implement Information Security Program (ISP) initiatives and security assurance plans. - Benchmark, evaluate, and integrate risk‑analysis tools and solutions. - Classify and protect information assets according to defined criteria. - Manage third‑party risk (TPRM) and ensure vendor compliance. - Conduct audits, ensure regulatory compliance, and support resilience planning. - Support pre‑sales activities and contribute to the evolution of service offerings (communities, threat‑intelligence, tooling, training, communication). **Required Skills** - Risk assessment, mapping, and mitigation methodologies. - Knowledge of security governance frameworks (ISO 27001, NIST, etc.) and ISP implementation. - Experience with third‑party risk management and compliance audits. - Strong analytical, problem‑solving, and leadership capabilities. - Excellent written and verbal communication in English (French required for client interaction). - Ability to work in multidisciplinary teams and drive knowledge sharing. **Required Education & Certifications** - Engineering degree from a recognized Grande École **or** a Master’s (M2) in Computer Science, Networks, or Information Systems with a specialization in information‑security. - Relevant security certifications (e.g., CISSP, CISM, ISO 27001 Lead Implementer) are a plus.

Issy-les-moulineaux, France

Hybrid

Senior

19-10-2025

Company Name

FORMIND

Job Title

Analyste SOC N3

Job Description

**Job Title:** SOC N3 Analyst **Role Summary:** Senior security operations center (SOC) analyst responsible for managing and escalating complex security incidents, conducting deep threat analysis, forensics, and improving SOC processes and detection capabilities across large client accounts. **Expectations:** - 4+ years of hands‑on cybersecurity experience with demonstrable incident response impact. - Advanced degree (Master’s or equivalent) in engineering, computer science, or MIAGE with a focus on information security. - Proficiency in English. **Key Responsibilities:** - Escalate and resolve high‑severity incidents as the SOC chain of escalation point. - Perform advanced threat hunting, forensic investigations, and root‑cause analysis. - Lead technical incident management and serve as pilot for large‑scale incidents. - Continuously refine SOC processes, tools, and detection rules. - Design and implement new detection use‑cases. - Contribute to pre‑sales activities, knowledge sharing, and service excellence initiatives. **Required Skills:** - Expertise with SOC tooling (SIEM, XDR, SIRP, SOAR, etc.). - Strong analytical and problem‑solving abilities. - Incident response and threat hunting proficiency. - Knowledge of cyber threat intelligence and forensics. - Effective communication and collaboration in a cross‑functional environment. **Required Education & Certifications:** - BAC+5 (Master’s) in engineering or MIAGE (M2) in Computer Science & Networks with a specialization in information security. - Preferred certifications: CISSP, CISM, CEH, or equivalent.

Issy-les-moulineaux, France

Hybrid

Junior

22-10-2025

Company Name

FORMIND

Job Title

Consultant(e) Senior GRC F/H

Job Description

**Job Title** Senior GRC Consultant **Role Summary** Provide advanced Governance, Risk, and Compliance (GRC) consulting services to France’s large enterprise clients across varied sectors. Lead security strategy, risk assessment, policy development, third‑party risk management, audits, and resilience initiatives. Contribute to pre‑sale activities, community engagement, tool development, and training to enhance the firm’s GRC portfolio. **Expectations** - Deliver high‑impact security strategies and risk frameworks tailored to client needs. - Demonstrate proven expertise in risk mapping, security assurance planning, and compliance auditing. - Build strong client relationships, guide stakeholders through complex GRC initiatives, and champion continuous improvement. - Collaborate with internal teams on solution enhancement, knowledge sharing, and best‑practice dissemination. **Key Responsibilities** 1. Conduct comprehensive risk cartographies and analysis for enterprise environments. 2. Design and implement ISPs (Information Security Plans) and security assurance programs. 3. Benchmark and integrate risk‑analysis technologies; develop classification and information protection roadmaps. 4. Manage third‑party risk (TPRM) assessment and monitoring. 5. Execute security governance, security operations oversight, and resilience planning. 6. Perform audit and compliance reviews, preparing reports and actionable recommendations. 7. Support pre‑sales, product positioning, community outreach, tooling, training, and internal communications. 8. Mentor junior consultants and share knowledge across the organization. **Required Skills** - Deep knowledge of GRC frameworks (ISO 27001, NIST, CIS, COBIT). - Expertise in risk assessment, threat modeling, and security policy development. - Strong analytical, problem‑solving, and project‑management capabilities. - Excellent written and verbal communication; ability to explain complex concepts to non‑technical stakeholders. - Leadership, teamwork, and a results‑driven mindset. - Proficiency in English (written & spoken). **Required Education & Certifications** - Graduate of a top engineering school or Master’s in Computer Science/Information Systems with a specialization in Information Security. - Minimum 3 years of demonstrable experience in cybersecurity/GRC with concrete deliverables (risk maps, strategies, policies, audits). - Professional certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer, or equivalent are strongly preferred.

Issy-les-moulineaux, France

On site

Senior

30-10-2025

Company Name

FORMIND

Job Title

Consultant(e) Résilience et Gestion de crise F/H

Job Description

**Job Title** Resilience and Crisis Management Consultant (M/F) **Role Summary** Consult an organisation’s top clients on resilience and crisis management, develop and optimise IT disaster recovery and business continuity plans, conduct resilience audits, lead business impact analysis and continuity planning, design and run realistic crisis simulations, author cyber‑incident procedures, and support pre‑sales, training, and continuous improvement initiatives. **Expectations** - Minimum 3 years of proven experience in cybersecurity, resilience or crisis management with tangible deliverables. - Ability to translate technical and functional resilience requirements into pragmatic solutions. - Project‑management proficiency within a cyber‑security context. - Strong communication skills in English (fluent). - A proactive mindset that supports both client delivery and service excellence. **Key Responsibilities** - Design, optimise and test IT Disaster Recovery (DR) / Business Continuity (BC) plans (PSI/PRA, PCA). - Audit the resilience of critical infrastructure and document findings. - Lead Business Impact Analysis (BIA) and develop Business Continuity Plans (BCM). - Organise, animate and evaluate cyber‑IT crisis exercises, devise realistic simulation scenarios. - Strengthen the crisis‑management framework: roles, tools, communication, response plans. - Draft cyber‑incident management and crisis procedures. - Participate in pre‑sales activities, contributing to product development, community engagement, knowledge monitoring, tooling, training and marketing initiatives. **Required Skills** - Cybersecurity and resilience architecture. - IT disaster recovery and business continuity planning. - Business Impact Analysis (BIA) & Business Continuity Management (BCM). - Crisis exercise design, facilitation, and evaluation. - Incident response procedure development. - Project management (scope, schedule, stakeholder coordination). - Customer‑centric consulting delivery. - English‑language fluency. **Required Education & Certifications** - BAC+5 (Master 2) from an engineering school or university (MIAGE) with a focus on information‑system security and risk management. - Valid certifications in cybersecurity, risk or project management (e.g., CISSP, CISM, CRISC, PMP, ITIL, ISO 27001 Lead Implementer) are highly desirable.

Issy-les-moulineaux, France

On site

Junior

30-10-2025