Job description

Ce que nos collaborateurs aiment le plus chez nous ❤ : Pour consulter leurs avis certifiés

Sofrecom Maroc stands out for its strongly collaborative culture, where people, trust and employee well-being are central priorities. A close management approach promotes support, accountability and long-lasting teamwork. This collaborative foundation is complemented by a notable innovation dimension, encouraging initiative, agility and experimentation. Structured processes ensure reliability and operational efficiency, while performance-driven practices play a more supportive and balanced role.

Within the Security department, you will be responsible for the technical and operational management of the implementation of cybersecurity tools and solutions in the Middle East & Africa (MEA) subsidiaries, ensuring the quality of integration, security, compliance, and adoption by local teams.
Main activities

• Coordination & technical integration (responsibility of "technical project manager")
• Gather and consolidate requirements (technical, security, operational) from the internal program manager for strengthening the security posture of Middle East & Africa (MEA) subsidiaries and ensure their operational deployment in coordination with the IT and Network teams of the subsidiaries.
• Produce/validate technical deliverables: HLD/LLD, architecture documents, network flows, system requirements, sizing, prerequisites.
• Coordinate integration into local environments: AD/Azure AD, messaging, endpoints, network, proxies, firewalls...
• Ensure compliance with Orange standards: security, architecture, naming, logging, hardening, secrets management, certificates...

Deployment, testing, and go-live

• Define the deployment strategy (pilot, waves, rollback, change management).
• Prepare and execute technical and security testing: test plans, acceptance criteria, test reports.
• Supervise go-live: change windows, run coordination, incident recovery plan.
• Ensure transition to operations: documentation, runbooks, skills transfer.

Security, compliance, and risks

• Ensure compliance with Group policies and local requirements (e.g., data protection, country regulatory constraints).
• Monitor cyber risks related to deployment: configuration deviations, technical debt, exposure (ports/flows), obsolescence, third-party access.
• Contribute to security reviews: threat modeling (if applicable), configuration reviews, logging and retention requirements.

Partner management (publishers/integrators/managed service providers)

• Contribute to managing interactions with suppliers of various tools/solutions to be integrated, in coordination with the internal program manager for strengthening the security posture of Middle East & Africa (MEA) subsidiaries: planning, quality, deliverables, escalations, KPIs.

Subsidiary adoption & support

• Support local teams (IT, SecOps, network): workshops, training, support, best practices.
• Adapt deployments to on-site constraints (bandwidth, inventory, obsolescence, team availability, languages).
• Contribute to industrialization: models, templates, reusable standards, deployment playbooks.