Role fully performed in French, supporting international banking entities.
Governance, Risk & Compliance
- Conduct Application Sensitivity Assessments to determine confidentiality, integrity, availability and traceability requirements for banking applications
- Evaluate DICP and Data Privacy criteria to establish application sensitivity levels and required security controls
- Review and validate security deliverables prior to CISO approval, ensuring accuracy, completeness and alignment with group security standards
- Inject identified risks into the internal risk management tool and monitor remediation implementation together with developers and application owners
- Perform quarterly follow-up of risk reduction action plans to ensure compliance with remediation commitments
- Handle security exceptions and derogations in accordance with Group Information System Security Policy
DLP Governance
- Contribute to development, implementation and continuous improvement of DLP policies
- Investigate DLP incidents and analyze data leakage risks
- Monitor DLP perimeter and implement corrective measures where required
- Ensure alignment between operational practices and data protection requirements
Cloud & Access Security
- Monitor and analyze PrismaCloud alerts across AWS and Azure environments to reduce vulnerabilities
- Manage AWS access approvals and security group related requests
- Process whitelisting requests for URLs, FTP, IPs and route openings
- Review and manage IAM role assignments (WHATS roles), including rights on UNIX, Windows and database environments
- Treat security exception requests via Pull Requests in internal repositories