Senior Security Analyst & Auditor

Orange Business is the Orange Group entity dedicated to businesses from the SMEs companies to the Franc and international Large Accounts. Its unique history as a telco operator and now an IT services company enables Orange Business to support the sustainable digital transformation of enterprise businesses worldwide.

Description of the division :

Within Orange Business Product & Marketing, the Communication Services Business Line's mission is to develop and launch on the enterprise market connectivity, customer experience and collaboration solutions: internet, SD Wan, voice, contact centers, cloud telephony, videoconferencing, IM, messaging, etc.

Within the Business Line, the Collaboration & Customer experience product Development department provides technical expertise, management of projects and programs to develop new standard services and the design of tailor-made offers for our most demanding customers in the areas of Collaboration, Customer Experience and Voice.

The Security team is made up of security officers responsible for applying the Security by Design approach to offers and services in the Collaboration, Voice and Contact Center areas.

Job role

We are recruiting a security officer within this team, in charge of the security requirements of the development projects of offers for the Communication Services Business Line.

As the guarantor of the application of Orange Business security procedures, your role is key to achieving the security prerequisites of our products and services. As a true facilitator, you will set up the security support necessary for product teams at all stages of a product's life cycle.

In your mission, you will be responsible of the security deliverables production: risk analysis, risk remediation monitoring, maintaining security documentation auditable, and security of our suppliers in order to mitigate risks of the supply chain.

Mission

You will take ownership of the security procedures in force at Orange Business, to guarantee a security status that complies with Orange Business's PSSI. You will support the product teams in Security By Design process, risk management activities, vulnerability management and supplier compliance.

More precisely, you will carry out the following activities:

Risk analysis, remediation plan, supplier compliance control, vulnerability and incident management on your perimeter.

Finally, you will address the prevention aspect of security with awareness activities for the benefit of products teams.

Skills

• You have knowledge of ISO 27001 and 27005 security standards relating to audits and risk management.
• You have acquired experience in risk analysis of IT systems and networks, and in the security audit of solution providers. Knowledge of the EBIOS method would be a plus.
• You take initiative, you have a sense of listening and you know how to adapt.
• You are fluent in spoken and written French and English.

What We Offer:

• Global opportunities: Work in multi-national teams with the opportunity to collaborate with colleagues and customers from all over the world
• Flexible work environment: Flexible working hours and possibility to combine work from office and home (hybrid ways of working)
• Professional development: training programs and upskilling/re-skilling opportunities
• Career growth: Internal growth and mobility opportunities within Orange
• Caring and daring culture: health and well-being programs and benefits, diversity & inclusion initiatives, CSR and employee connect events
• Reward programs: Employee Referral Program, Change Maker Awards

Regardless of your age, gender identity, race, ethnic origin, religion/belief, sexual orientation, marital status, neuroatypia, disability, veteran status or appearance, we encourage diversity within our teams because it is a strength for the collective and a vector of innovation. Orange Group is a disabled-friendly company and equal opportunity employer: don't hesitate to tell us about your specific needs.