Cybersecurity Expert

About the Role

We are seeking a highly skilled Cybersecurity Expert to join our team at MAIF, a leading insurance company. As a key member of our Information Systems Security (ISS) team, you will play a critical role in strengthening our defenses and ensuring the optimal protection of our products.

Key Responsibilities

• Support the implementation of the Security by Design approach throughout the Product lifecycle, mainly in the IT Infrastructure domain (Network, Authentication), in an agile context at scale.
• Collaborate with business teams, especially IT, to assess cybersecurity risks and develop appropriate protection strategies.
• Analyze upcoming or existing architectures, develop security risk reduction strategies, and verify solutions compliance with established security standards and MAIF group security policies.
• Accompany Security Referents, ambassadors of the Security Culture within operational collectives of the IT department, to embody their role.
• Deploy the IT Security Roadmap in collaboration with technical and business teams.
• Provide security expertise on major company topics driven by business projects or tribes.
• Pilot SSI Roadmap topics (Privileged Access Management, implementation of a secrets management solution), issue SSI recommendations, and accompany operational teams of the IT department.
• Report to Group CISO and/or Deputy Group CISO on managed projects (validation points / arbitrations).
• Contribute to the continuous improvement of the ISP methodology, processes, and tools to meet internal client needs.
• Contribute to the industrialization of ISP processes and tools (Security Assurance Plan, Security Passport, SSI support processes, etc.).
• Propose improvements to enhance the service quality delivered by the IS team.
• Accompany suppliers and internal clients in contracting solutions and/or services with IT Security stakes.

About You

We are looking for a highly skilled and experienced Cybersecurity Expert with a deep understanding of key security protocols, intrusion detection tools, and attack techniques. You should have a good understanding of system architectures and security concepts specific to data processing applications and platforms.

You will need to provide strategic advice and validate architectural and technical choices related to IT infrastructure security, without carrying out operational interventions. You should have the ability to assess the security of infrastructure solutions, relying on current regulations, company policies, and market recommendations to make relevant suggestions.

You should have in-depth expertise in Windows and Linux operating systems, specifically in a Datacenter environment, mastering virtualization principles (especially VMware), backup strategies, storage systems, and PKI management.

Requirements

• Functional and technical knowledge in IS security.
• Proven experience in cybersecurity, especially in the IT Infrastructure domain.
• Good interpersonal skills and ability to demonstrate active listening.
• Autonomy and ability to make proposals and advocate for convictions in the IS domain.
• Teaching and technical subject explanation abilities in a clear and appropriate manner.
• Synthesis mindset.
• Good adaptability and aptitude to work in a dynamic and ever-evolving environment.
• Responsible behavior and ability to communicate constructively in writing and orally.
• Analytical skills and technical curiosity.
• Rigorous and organized, with the ability to apply MAIF methods and standards in technical terms and in agility.
• Ability to work in a team.