Risk Officer

For one of our clients operating in the defense sector, we are looking for a Cybersecurity Risk Management Lead to join a growing Cybersecurity team and play a key role in strengthening the organization's security governance and risk management capabilities.

This position offers much more than a traditional GRC role. You will have the opportunity to influence the cybersecurity strategy, help mature security practices, and coordinate with multiple cybersecurity domains such as Risk Management, Security Operations, IAM/PAM governance, compliance, and resilience.

The current cybersecurity risk management maturity is still evolving, making this a unique opportunity for someone who enjoys building, structuring, and driving meaningful change while working closely with both technical teams and business stakeholders.

Your Role

As Cybersecurity Risk Management Lead, you will act as a trusted partner across the organization and contribute to the establishment of a strong security governance culture.

Your responsibilities will include:

• Defining and continuously improving the Cybersecurity Risk Management framework.
• Conducting cyber risk assessments and maintaining risk registers (ISO27005 / EBIOS).
• Supporting cybersecurity governance, policies, standards, and reporting.
• Monitoring risk treatment plans and driving remediation initiatives.
• Developing KPIs, KRIs, dashboards, and executive-level reporting.
• Ensuring cybersecurity risks are appropriately considered within projects, operations, and business decisions.
• Contributing to the organization's cybersecurity maturity roadmap.

Beyond risk management, you will also work closely with other cybersecurity functions:

• Coordinating with the SOC to ensure incidents, trends, and threat intelligence are properly integrated into risk management processes.
• Supporting the governance and evolution of IAM and PAM models.
• Contributing to third-party and supply-chain security assessments.
• Participating in resilience, crisis management, and business continuity initiatives.
• Acting as a bridge between cybersecurity, IT, engineering teams, and business stakeholders.

The Person We're Looking For

We are looking for someone who combines solid cybersecurity governance expertise with strong interpersonal skills.

Technical knowledge is important, but equally important is the ability to collaborate, influence, and create trust within a team.

You enjoy working with people, understanding business challenges, and helping organizations move forward pragmatically rather than theoretically.

Experience with SOC governance, IAM/PAM, resilience, or security transformation programs would be a strong asset.

What Makes This Opportunity Unique?

• Opportunity to shape and mature an organization's cyber risk capability.
• Broad role covering governance, risk, security operations coordination, and identity governance.
• Exposure to a strategic and mission-critical environment.
• Collaborative cybersecurity team with strong visibility across the business.
• Human-centered culture where stakeholder engagement, collaboration, and pragmatism are valued as much as technical expertise.

Requirements

• French native (mandatory) & Professional English.
• Available 4 days/week onsite.