01
TRCI-26-06218
Security Manager / Cybersecurity Expert (Application Portfolio, GRC)
Contract role in Niort for a Security Manager/Cybersecurity Expert acting as the security referent for a portfolio of applications and one or more business departments. The mission covers Security-by-Design support to projects and application teams, validation of architecture/technical choices from a cybersecurity perspective, enforcement of group security policies/standards, and end-to-end cyber risk management (risk analyses using EBIOS RM or equivalent, residual risk tracking, compliance support, and decision/arbitration files). The role also includes third-party/vendor security assessments (including Cloud/SaaS outsourcing risks), governance KPIs, executive reporting to committees, and stakeholder awareness/culture building.
Position summary
- Location
- France
- Workplace
- On-site
- Employment
- Contract
- Experience
- Minimum 7 years and Maximum 15 years
Role overview
Why This Role Matters.
Contract role in Niort for a Security Manager/Cybersecurity Expert acting as the security referent for a portfolio of applications and one or more business departments. The mission covers Security-by-Design support to projects and application teams, validation of architecture/technical choices from a cybersecurity perspective, enforcement of group security policies/standards, and end-to-end cyber risk management (risk analyses using EBIOS RM or equivalent, residual risk tracking, compliance support, and decision/arbitration files). The role also includes third-party/vendor security assessments (including Cloud/SaaS outsourcing risks), governance KPIs, executive reporting to committees, and stakeholder awareness/culture building.
Your Impact
Deliver Enterprise Value
Help organisations solve complex business problems through modern technology, consulting expertise and measurable outcomes.
Collaboration
Work Across Teams
Collaborate with consultants, architects, engineers and client stakeholders throughout the project lifecycle.
Growth
Learn Continuously
Gain exposure to enterprise technologies, certifications, mentoring and real-world project experience.
Career Path
Grow With Ubique
Build a long-term consulting career with opportunities to take on greater responsibility and leadership over time.
Responsibilities
What You'll Be Doing.
Every role at Ubique contributes directly to solving meaningful business challenges for our clients.
02
Acting as a security referent for business departments and application managers.
03
Define and promote the security requirements applicable to the application heritage.
04
Support projects and application developments in a Security by Design approach.
05
Participate in the validation of architecture choices and technical solutions from a cybersecurity perspective.
06
Ensure the application of the Group's security policies, standards and best practices.
07
Carry out and manage cyber risk analyses of projects and applications according to the methodologies in force (EBIOS RM or equivalent).
08
Identify, qualify and monitor residual risks until they are treated or accepted.
09
Support the teams in complying with applicable regulatory and normative requirements.
10
Participate in risk analyses related to outsourcing and the use of Cloud or SaaS services.
11
Produce reports for governance bodies, management committees and risk committees.
12
Regularly present the status of risks, vulnerabilities, action plans and compliance of the assets.
Technology stack
Tools & Technologies.
The platforms and technologies you'll use to build modern, enterprise-grade solutions.
01
EBIOS RM
Required
02
ISO 27001
Required
03
NIST
Required
04
CIS Controls
Required
05
OWASP
Required
06
Security by Design
Required
07
Application Security
Required
08
Cyber Risk Analysis
Required
09
Residual Risk
Required
10
Third-Party Risk
Required
11
Vendor Security Assessment
Required
12
Cloud
Required
13
SaaS
Required
14
Outsourcing
Required
15
Security Governance
Required
16
Security Policies
Required
17
Security Standards
Required
18
Architecture Review
Required
19
Compliance
Required
20
Risk Committee Reporting
Required
Requirements
Skills & Experience.
We value curiosity, collaboration and continuous learning. If you don't meet every requirement but believe you can make an impact, we'd still love to hear from you.
Essential
Required Qualifications
Cybersecurity governance and risk management (GRC)
Application security / application asset security
Security by Design (integrated into projects and development lifecycle)
Cyber risk analysis methodology: EBIOS RM (or equivalent)
Security standards/frameworks knowledge: ISO 27001, NIST, CIS Controls, OWASP
Architecture and technical solution security review/validation
Residual risk identification, qualification, tracking and treatment/acceptance workflow
Regulatory/normative compliance support (interpreting and applying requirements)
Third-party/vendor security assessment and follow-up of remediation action plans
Cloud/SaaS/outsourcing risk analysis participation
Security policies/standards/best practices enforcement
Governance reporting: KPIs/indicators, risk/vulnerability/action plan reporting to committees
Strong communication, summarization and presentation to management/risk committees
Ability to interact with business, IT, risk and management stakeholders
Autonomous/independent delivery in a multi-stakeholder environment
Preferred
Nice to Have
Experience preparing decision/arbitration dossiers for cyber risk acceptance
Experience running security awareness initiatives and cybersecurity culture programs
Experience with vulnerability status reporting and remediation governance (process-level)
What you'll gain
More Than Just A Job.
We're committed to helping every team member grow professionally, personally and technically while working on meaningful projects.
Global Exposure
Collaborate with international clients and multicultural teams on enterprise programmes.
Continuous Learning
Expand your expertise through mentoring, certifications and hands-on project experience.
Career Growth
Take ownership, develop leadership skills and grow your consulting career over time.
Flexible Working
Hybrid and remote collaboration designed around trust and delivering exceptional outcomes.
People First
Join a supportive culture where collaboration, respect and long-term relationships come first.
Enterprise Projects
Work on meaningful technology initiatives for leading organisations across industries.
Apply
Apply for Security Manager / Cybersecurity Expert (Application Portfolio, GRC)
One page, about two minutes. We only ask for what we actually need to have a first conversation.