Hybrid Security Engineer, GRC

at Transatel | NTT

• Job title: Security Engineer, GRC
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Location requirements: Hybrid, Paris, France

About the role

• Security Engineer ensuring compliance with security regulations for Transatel. Participating in security system management and risk analysis.

Responsibilities

• Maintain and enhance the Information Security Management System (ISMS) in accordance with ISO 27001: policy reviews, internal audits, and management review.
• Perform internal risk analyses, propose appropriate action plans in collaboration with the CISO, and track action plans to achieve defined objectives.
• Ensure compliance with applicable regulations and security certifications.
• Anticipate regulatory changes and evolving requirements for required certifications.
• Provide security support for RFPs to the sales and procurement teams.
• Participate in the team’s RUN activities, such as responding to security incidents/anomalies and conducting user awareness activities.

Requirements

• You hold an engineering degree or equivalent in IT security, with at least 4 years in a role involving internal audits and deployment of security equipment at an integrator, service provider, or operator.
• You have a strong command of security concepts, methodologies, and tools, including security standards, offensive and defensive techniques, and protection and detection solutions.
• You possess technical network and systems knowledge sufficient to communicate effectively with internal teams.
• You are familiar with current regulations (GDPR, NIS2, DORA…) and major security certifications (ISO 27001, SOC 2, ISO 22301, ISO 27018…).
• You know and have implemented risk management methodologies (EBIOS, NIST, BIA…).
• You have strong analytical, synthesis, and risk-communication skills for different audiences.
• You are autonomous, rigorous, proactive, and results-oriented.
• You have a good level of English, both written and spoken.

Benefits

• Compensation package: base salary + individual bonus + semi-annual incentive and profit-sharing (can be allocated to a company savings plan (PEE) or a retirement savings plan (PER)).
• Salary reviews every 6 months.
• Up to 2 days of remote work per week.
• 25 days of annual leave plus additional days off.
• Works council (CSE), on-site company restaurant, competitive health insurance, 50% reimbursement of public transport pass (Navigo) or a sustainable mobility allowance.