Alternance - Digital Workplace Operational Security Officer (F/H)

Contrat en alternance Systèmes et Réseaux Hauts-de-Seine septembre 2023 de 12 à 24 mois

Saint-Gobain, leader mondial de l'habitat, conçoit, produit et distribue des matériaux de construction en apportant des solutions innovantes sur les marchés en croissance des pays émergents, de l'efficacité énergétique et de l'environnement. Saint-Gobain est une maison accueillante, sûre et ouverte sur le monde, dans laquelle on entre pour un parcours.

Présent dans 67 pays et près de 167 000 collaborateurs.

Saint-Gobain Group Digital and IT is responsible for defining, implementing and managing the Group's Information Systems (IS) with its 1,000 subsidiaries at 6,500 sites in the world. The Group Digital and IT also carries the common resources (infrastructures, telecommunications, digital platforms, transversal applications).

At GDI we will provide different technological services with a global scope, supporting Saint-Gobain in its Digital Transformation, reflecting Saint-Gobain’s differentiating culture of innovation, empowerment and collaboration.

Alternance - Digital Workplace Operational Security Officer (F/H)

Your mission :

1. Manage GDI cybersecurity requests

Perform the in line security validations prior to implementation (network flow opening in firewall, security exception on the proxies, user admin rights management, etc.) within the SLAs and according to the Group security rules
Escalate the requests which do not comply with Saint Gobain’s security rules
Route expertise requests to the appropriate expert team ensure they are treated properly

2. Execute GDI Operational Security controls & support security remediation action plan for Digital Workplace

Perform the periodical controls for the scope of Digital Workplace services managed by the Group Digital IT teams
Perform the standard Security Acceptance Testing in Projects for the scope of Digital Workplace
Consolidate coordinate operation security remediation action plan for Digital Workplace
Follow the remediation action and provide support to remediate

3. Handle GDI cyber security incident & coordinate remediation

Handle incident reported by CyberSOC & define post mortem Action plan when necessary
Coordinate incident remediations and support crisis management

4. Report & improve operational security activities

Build and execute the reporting (KPI & KRI) to the security officers
Formalize, improve & automate (when possible) security operations and procedures

5. Active support of the team on all activities

Your profile :

You are currently a student in a Master program of IT with strong interest in Cybersecurity (Bac+4/5)

Experienced with vulnerability management tools (Qualys, etc.)
Experienced with security processes (IAM, vulnerability, exception, flow opening, etc.)
Knows Workplace technologies (AAD, M365, IAM, Windows, etc.)
Knows of risk analysis methodologies (EBIOS, ISO 27005, etc.) and security into project
Script capability (PowerShell, etc.)
Security certification(s) is a plus