Cybersecurity Lead Implementer

Function

We’re looking for a high-impact IT Security Consultant to join our client’s cybersecurity taskforce and drive critical regulatory and operational security initiatives. This is a strategic expert-level mission where you will play a central role in strengthening enterprise-wide resilience, compliance, and security governance within a complex, multi-stakeholder environment.

The Role

As part of our client’s Security & Privacy operational structure, you will lead the implementation of a major European regulatory security framework (NIS2) and oversee several priority cybersecurity programs. Acting as a trusted advisor to senior security leadership, you will ensure that security capabilities are structured, measurable, and operationally effective across the organization.

Key Responsibilities

• Lead the implementation of regulatory compliance initiatives aligned with NIS2 and ISO 27001/27002 standards

• Coordinate and operationalize Business Continuity Plans (BCP) and Disaster Recovery Plans (DRP), including RTO and RPO alignment across systems

• Drive enterprise-wide traceability and monitoring capabilities (SIEM, SOAR, SOC), ensuring centralized governance and cross-functional collaboration

• Act as the central point of contact for vulnerability lifecycle management using VRM platforms and secure development practices

• Oversee application security tooling such as SonarQube (SAST integration and governance)

• Manage risk analysis, prioritization, and mitigation strategies across projects and production environments

• Strengthen Identity & Access Management (IAM) controls

• Ensure structured ITSM processes (ticketing, backlog follow-up, operational tracking)

• Develop and maintain executive dashboards, KPIs, and security reporting

• Support cloud security governance and secure architecture best practices

The Ideal Candidate

We are seeking an expert-level IT Security Specialist with recent hands-on experience in:

• Regulatory compliance & auditability (ISO 27001/27002, NIS2)

• Business continuity & disaster recovery governance

• Enterprise risk and vulnerability management (VRM platforms)

• Cloud security and IAM

• Application security (SonarQube / SAST)

• Monitoring, logging, and advanced traceability frameworks

• IT service management environments

• KPI-driven reporting and executive communication