InfoSec Cyber Advisor

About the role

We are looking for an experienced InfoSec Cyber Advisor to support governance, risk identification and strategic security recommendations across key projects. The role works closely with enterprise architecture and project management to embed security by design.

Key responsibilities

• Integrate security governance frameworks, policies and regulatory requirements into project lifecycles.
• Assess project environments for cyber risks, vulnerabilities and threats, delivering risk assessments and mitigation plans.
• Provide security advisory as a subject‑matter expert on frameworks such as ISO 27001, NIST, CIS and compliance standards (GDPR, SOC 2, SOx).
• Collaborate with Enterprise Architecture and Project Management to design practical security solutions aligned with business objectives.
• Promote security awareness and risk‑informed decision‑making among cross‑functional stakeholders.

Required profile

• 10+ years of professional experience, with at least 8 years in cybersecurity governance, risk management and compliance.
• Strong knowledge of security frameworks and regulations (ISO 27001, NIST, CIS, GDPR, SOC 2, SOx).
• Experience working with Enterprise Architecture, IT and OT security teams.
• Bilingual in French and English.
• Professional certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Implementer are preferred.

Required skills

• ISO 27001
• NIST
• CIS
• GDPR
• SOC 2
• SOx
• Enterprise security architecture
• Cloud security
• OT security
• SAP
• Salesforce