Skills

Monitoring

Job Specifications

L'offre

Projet

SECURITY GOVERNANCE POLICY SPECIALIST

Secteurs

Défense & Sécurité, Télécommunications, Services & Systèmes d'Informations

Description De L'offre

We need to strenghten and improve its security process and procedure regarding its human and physical security governance. We search for a policy and procedure specialist to assess, define and write security documents (process, procedure, contracts security appendix, terms and conditions). The role reports to the chief security officer of the company.

We Are a Leading Company In Information And Cloud Technology. We Search For a Security Governance Policy Specialist To Write And Process The Validation Of Security Documents

Security process and procedures regarding human and physical security risk
Contracts confidentiality requirements, appendix, terms and conditions for providers

Missions à réaliser

Produce the templates and security risk assessement :
Role Based Security risk assessement (template and 100% of employees and contractors security logbook).
Gather all security risk related to human risk in physical and cybersecurity field (employees, IT administrators, users).
Define a security awareness plan to manage assessed risks (knowledge and behaviour objectives)
Propose a security awareness program (implementation process, resources, procedures and monitoring dashboard).
Write and validate hosting service provider contract security appendix, Terms and conditions
Benchmark security terms and conditions for equivalent services providers
Adapt security terms and conditions for our current hosting service provider
Drive workshop with the provider regarding requirements, terms and conditions
Process contract security appendix validation with provider and stakeholders
Conduct physical security systems GDPR compliance
Data assessement for physical security access accreditation
Build a map of physical access data processing and a shared data mapping
Assess sychronicity solution to automate access control database and registration process (ID, profil, rights, authorized zones and time).
Assess automated process and solution for access control data base backup process
Assess automated tools to build incident report using security systems data (CCTV, access control logs, alarms).
Assess physical security systems regarding GDPR risk and compliance

Livrables attendus

Security awareness program

Contract security appendix

Data assessement

Modalités

Date de démarrage : dès que possible
Date de fin : durée 3 mois
Candidats recherchés : 1
Expérience : 0+ an
Type de contrat : Freelance / Indépendant, Temps complet
Rémunération : 150 € - 2000 € par jour selon expérience
Mode de facturation : Assistance technique
Localisation : Paris, France
Télétravail partiel

Le profil recherché

Compétences requises

securité, SANS SSAP, RGPD

Description Du Profil

ISO27001 Implementer, ISO27005 Risk Manager, EBIOS Risk Manager,

Security awareness professional (SANS SSAP) and/or Physical Security Professional (ASIS PSP)

Knowledge in GDPR and SECNUMCLOUD requirements

Langues

Français, Anglais

Catégories

Autre

À propos de l'entreprise

Les secteurs d'activité

Aéronautique, Spatial, Défense & Sécurité, Services & Systèmes d'Informations

Taille de l'entreprise

> 2000 salariés

About the Company

Kicklox est une plateforme d'ingénierie et de conseil en technologies.Nous fédérons une communauté de plus de 120 000 ingénieurs qui interviennent (en mission ou en CDI) sur les projets de nos clients, grâce à notre plateforme digitale qui facilite la mise en relation, et le suivi de projet. Nous travaillons avec des grands groupes tels que Safran, Thales, Airbus, Nokia et bien d'autres. Vous avez un projet à faire réaliser par notre communauté ? https://www.kicklox.com/ Vous êtes ingénieur ou développeur, inscrivez-vous p... Know more