À propos de l'entreprise
Les secteurs d'activité Aéronautique, Spatial, Défense & Sécurité, Services & Systèmes d'Informations Taille de l'entreprise > 2000 salariés
L'offre
Projet SECURITY GOVERNANCE POLICY SPECIALIST Secteurs Défense & Sécurité, Télécommunications, Services & Systèmes d'Informations Description de l'offre We need to strenghten and improve its security process and procedure regarding its human and physical security governance. We search for a policy and procedure specialist to assess, define and write security documents (process, procedure, contracts security appendix, terms and conditions). The role reports to the chief security officer of the company.
We are a leading company in information and cloud technology. We search for a security governance policy specialist to write and process the validation of security documents :
- Security process and procedures regarding human and physical security risk
- Contracts confidentiality requirements, appendix, terms and conditions for providers
Missions à réaliser 1. Produce the templates and security risk assessement :
- Role Based Security risk assessement (template and 100% of employees and contractors security logbook).
- Gather all security risk related to human risk in physical and cybersecurity field (employees, IT administrators, users).
- Define a security awareness plan to manage assessed risks (knowledge and behaviour objectives)
- Propose a security awareness program (implementation process, resources, procedures and monitoring dashboard).
2. Write and validate hosting service provider contract security appendix, Terms and conditions
- Benchmark security terms and conditions for equivalent services providers
- Adapt security terms and conditions for our current hosting service provider
- Drive workshop with the provider regarding requirements, terms and conditions
- Process contract security appendix validation with provider and stakeholders
3. Conduct physical security systems GDPR compliance
- Data assessement for physical security access accreditation
- Build a map of physical access data processing and a shared data mapping
- Assess sychronicity solution to automate access control database and registration process (ID, profil, rights, authorized zones and time).
- Assess automated process and solution for access control data base backup process
- Assess automated tools to build incident report using security systems data (CCTV, access control logs, alarms).
4. Assess physical security systems regarding GDPR risk and compliance
Livrables attendus Security awareness program
Contract security appendix
Data assessement
Modalités
- Date de démarrage : dès que possible
- Date de fin : durée 3 mois
- Candidats recherchés : 1
- Expérience : 0+ an
- Type de contrat : Freelance / Indépendant, Temps complet
- Rémunération : 150 € - 2000 € par jour selon expérience
- Mode de facturation : Assistance technique
- Localisation : Paris, France
- Télétravail partiel
Le profil recherché
Compétences requises securité, SANS SSAP, RGPD Description du profil ISO27001 Implementer, ISO27005 Risk Manager, EBIOS Risk Manager,
Security awareness professional (SANS SSAP) and/or Physical Security Professional (ASIS PSP)
Knowledge in GDPR and SECNUMCLOUD requirements
Langues Français, Anglais Catégories Autre
Le profil recherché
Compétences requises securité, SANS SSAP, RGPD Description du profil ISO27001 Implementer, ISO27005 Risk Manager, EBIOS Risk Manager,
Security awareness professional (SANS SSAP) and/or Physical Security Professional (ASIS PSP)
Knowledge in GDPR and SECNUMCLOUD requirements
Langues Français, Anglais Catégories Autre