Information Security Governance Consultant - FRANCE

Role Overview We are seeking an Information Security Governance Consultant to support organizations in defining, structuring, and implementing their information security governance frameworks. This role focuses on helping clients strengthen their security strategy, assess control maturity, manage risks, and ensure compliance with international standards and regulations. Key Responsibilities Define and structure organizational information security strategies Establish governance frameworks, policies, and procedures Conduct information security maturity assessments and audits Identify, assess, and manage information security risks Advise on risk treatment and control implementation Support resilience initiatives (BCP, DRP, incident management, cyber crisis management) Ensure cloud security governance alignment Provide regulatory and standards compliance support (GDPR, ISO 27001, NIST CSF, CIS Controls, CSSF, SWIFT, etc.) Contribute to governance activities in SCADA environments when applicable Provide CISO advisory support or assume interim CISO responsibilities when required Translate governance requirements into practical and business-aligned security measures Requirements Engineering degree or equivalent qualification Strong understanding of governance-based security approaches Familiarity with SCADA environments Solid knowledge of security frameworks and standards (ISO 27001, NIST CSF, CIS Controls, SWIFT, etc.) Structured risk management approach Experience in implementing security controls Certifications such as CISSP, CISM, ISO 27001 Lead Implementer/Auditor, ISO 27005 Risk Manager are a strong plus French: Fluent (C1–C2 required) English: Minimum B1 level Candidate Profile Strong interest in Information Security Governance Excellent communication skills with various stakeholders (Management, CISO, IT, Business teams) Strong analytical and writing skills Structured, organized, and pragmatic mindset Strategic thinking with the ability to maintain a long-term perspective Proactive, independent, and solution-oriented Keen to stay updated on cybersecurity trends and emerging threats Motivated and highly engaged