🛡️ Assistant Supervisor — Cybersecurity Audit

🏢 Background

A major European banking group is establishing an internal cybersecurity audit service within its Group Cybersecurity Division. The assignment involves setting up the service, not operating it once it is up and running.

• A service to be designed from scratch: value proposition, pricing, internal marketing, rollout
• External audit firms to be selected, guided, and developed
• A regulated environment, with executive committees that need to be kept informed

🎯 The Mission

You will assist the supervisor with three tasks that follow one after another.

Designing the Service Offering

• Structuring Services: Value Proposition, Operational Characteristics
• Draft the related documentation: procedures, specifications, templates, and methodology
• Manage requests for information (RFI) and requests for proposal (RFP) with external firms
• Define SLAs, develop KPIs, measure performance, and present the results to the committee
• Produce communication and reporting materials for management

Manage projects and ensure quality

• Define the scope of each audit with stakeholders: scope, objectives, and expectations
• Plan the schedule, resources, tools, and roles among internal and external teams
• Monitor progress and ensure methodological compliance
• Conducting a critical review of each firm deliverable: that is the heart of quality control
• Participate in the presentations

Enhancing Firms' Expertise

• On-site support, in their work environment, to transfer the group's proprietary audit methodology

🎯 Ideal Candidate Profile

• Cybersecurity Audit: Managing IT Risks, Audit Methodologies, and the Applicable Regulatory Framework
• Risk Analysis: EBIOS, ISO 27001 / 27002 / 27005, NIST
• Technical expertise: network architectures, information systems, and security tools (SIEM, vulnerability management, log analysis). Familiarity with database management systems (SQL Server, Oracle), Windows and UNIX, client/server architectures and web applications, firewalls, routers, and switches
• Strong writing skills: A significant portion of the work here involves writing—using Word and PowerPoint on a daily basis
• Auditor's mindset: critical thinking, thoroughness, and a commitment to high-quality deliverables

🤝 The Qualities That Make a Difference

• Leading a committee, a meeting, or a training session: the position involves a high level of public exposure
• Summarize and Simplify for Non-Technical Management
• Manage a project and define meaningful metrics
• Working with internal teams and vendors, while constantly adapting

🛑 This job isn't for you if...

• Want to conduct audits yourself? Here, you’ll lead, guide, and challenge consulting firms
• You're looking for a pre-built framework: this service isn't available yet
• Do you find drafting procedures and committee materials boring?

✅ This job is for you if...

• You've been on both sides—the firm and the intern—and you know where the deliverables fall short
• Do you prefer building a system rather than running it?
• You're comfortable working with both technical teams and the executive committee

💼 Terms and Conditions

• Contract: freelance
• Duration: 6 months, renewable
• Average daily rate: 800 €
• Experience: 5 to 10 years
• Start date: as soon as possible

📌 Prerequisites

• Fluency in French and English: Both are required; the work environment is international.
• Based in the Île-de-France region: on-site work in Paris, with travel to the offices of the firms we support. Applications requiring a fully remote position or relocation will not be considered.