Adjoint RSSI - CDI PARIS

Our client, a hedge fund based in Paris, is a global quantitative and systematic asset management firm applying a scientific approach to finance to develop alternative investment strategies. They are looking for their future VP Security.

About the role:
You will be the Security Specialist in many of our IT project teams to support the development of their activities worldwide.

1. Represent Information Security in project teams and ensure adherence to existing security policies and standards.
2. Provide guidance on a large spectrum of security domains including Cloud and emerging technologies.
3. Propose and implement identity and access management governance workflows and information sharing solutions in a hybrid cloud and on-premises environment.

You will also participate in daily tasks:

1. Conduct security design reviews and risk analysis to identify potential security weaknesses in the design, implementation, and operation of infrastructure and applications.
2. Define requirements and guidelines for the secure design, implementation, and usage of IT solutions.
3. Define and implement controls and remediation of non-compliant configuration and usage of solutions.
4. Conduct vendor due diligence to evaluate the risk of using certain online services.
5. Follow the evolutions of the cyber threat landscape and contribute to our policies and standards aligned with industry best practices and the Firm's business needs.
6. Champion security awareness and ensure security policies are always adhered to.

The position is based in Paris, France and will be under the supervision of the Information Security Officer based in New York, USA.

Your Profile:
You have extensive experience in IT security with Windows, Linux, Azure, Microsoft 365, and Amazon Web Services environments, network and application firewalls (policies).

You have a strong understanding of computing architecture, technical design, and implementations, including one or two of these expertises:

1. Security protocols, cryptography, certificates, authentication, authorization: TLS, IKE, AES, GPG, SSH, ...
2. Identity management: LDAP, Active Directory, Azure AD, SSO, SAML, SCIM, OpenID, OAuth, Kerberos, multi-factor authentication…
3. Network segmentation and demilitarized zones, least privilege, zero trust, risk-based access, ...
4. Cloud delivery models: Infrastructure as a Service, Platform as a Service, and Software as a Service.
5. Basic knowledge of Python and Powershell scripting languages, static and dynamic network routing and address translation, and server and container virtualization technologies are preferred.

You have strong critical thinking and analytical skills and the ability to think "out of the box". You can work on your own and as part of a team. You have excellent written and verbal communication skills in French and English.

Interesting salary package

Are you interested? Do not hesitate to apply by joining your CV, communicating your availabilities for a call, and your salary expectation.