Cybersecurity Consultant Auditor

# Cybersecurity Consultant Auditor
- CLA
* Home
* Cybersecurity Consultant Auditor
- CLA
* July 8, 2026
* 0 Comments
* By Roberte Okoya1. Mission Context: In a context of increasingly stringent regulatory, normative, and operational cybersecurity requirements, the organization wishes to assess the maturity of its information system, identify priority risks, measure compliance gaps, and define a pragmatic and prioritized remediation roadmap. 2. Mission Objectives :
• Evaluate the cybersecurity maturity of the information system against best practices and reference frameworks, including ANSSI, NIS2, and ISO 27001.
• Identify major cyber risks, critical vulnerabilities, and compliance gaps.
• Analyze governance, protection, detection, response, and resilience mechanisms.
• Propose a prioritized, realistic remediation plan tailored to business, technical, and regulatory challenges.
• Provide a clear summary for technical, business, and decision-making stakeholders. 3. Scope of Intervention :
• Information security governance, security policy, organization, and associated roles.
• Identity and access management, authentication, authorizations, and rights reviews.
• Backup, recovery, business continuity, and disaster recovery: Disaster Recovery Plan (DRP)/Business Continuity Plan (BCP).
• Security incident management, escalation procedures, logging, and monitoring.
• Vulnerability management, update processes, hardening, and remediation.
• Compliance with applicable standards and

requirements:
ANSSI, NIS2, ISO 27001, and cybersecurity best practices. 4. Main Activities
• Prepare and define the mission: document collection, interviews, and definition of the audit scope and schedule.
• Conduct interviews with business, IT, security, operations, and management stakeholders.
• Analyze existing processes, procedures, policies, documentation, and technical systems.
• Assess the cybersecurity maturity level and identify gaps compared to reference requirements.
• Map priority risks, vulnerabilities, and weaknesses.
• Formulate operational, organizational, and technical recommendations.
• Develop a prioritized action plan based on criticality level, implementation effort, and expected impact.
• Present the audit results and facilitate understanding of the remediation measures. 5. Expected Skills
• Proficiency in security standards and frameworks: ISO 27001, ISO 27002, NIS2, ANSSI recommendations, information systems security best practices.
• Good knowledge of risk analysis methods, particularly EBIOS RM or equivalent.
• Ability to audit IAM, MFA, privilege management, access control reviews, and access management systems.
• Knowledge of backup, recovery, disaster recovery/business continuity planning, crisis management, and operational resilience mechanisms.
• Understanding of IT architectures, infrastructure, networks, systems, workstations, and cloud or hybrid environments.
• Proficiency in vulnerability management, patch management, hardening, monitoring, and detection processes.
• Ability to analyze audit evidence, document findings, and write clear and actionable recommendations.
• Excellent writing skills, ability to synthesize information, methodological rigor, and the ability to explain complex cybersecurity topics in simple terms. 6. Required Profile
• Experienced cybersecurity consultant, information systems security auditor, GRC consultant, deputy CISO, or equivalent profile.
• Significant experience in conducting cybersecurity maturity audits, risk analyses, or compliance engagements.
• Good understanding of the business, regulatory, and technical issues related to information systems security.
• Ability to work with diverse stakeholders: management, CIO, CISO, infrastructure, production, business, and compliance teams.
• Autonomy, organizational skills, consultative approach, confidentiality, and ability to prioritize risks.
• Preferred certifications: ISO 27001 Lead Auditor or Lead Implementer, EBIOS RM, CISSP, CISM, CISA, CRISC, or equivalent.
• Desired experience in regulated, critical, or high-compliance environments. 7. Expected Deliverables
• Mission scoping document and intervention plan.
• Cybersecurity maturity assessment.
• Mapping of identified risks, vulnerabilities, and weaknesses.
• Analysis of compliance gaps compared to selected standards.
• Prioritized short-, medium-, and long-term remediation plan.
• Executive summary for management.
• Detailed audit report including findings, criticality levels, impacts, recommendations, and action priorities. 8. Intervention Methods
• Intervention in the form of interviews, workshops, document reviews, and evidence analysis.
• Close collaboration with IT, security, business, compliance, and management teams.
• Interim reports may be provided to validate findings and priorities.
• Final report including a summary presentation of major risks and the remediat