Job description

Company culture :

Bouygues Construction IT is driven by a culture strongly focused on performance and competitiveness, where ambition, challenge and results orientation are key drivers of success. This dynamic is closely complemented by a collaborative dimension, promoting trust, teamwork and close managerial support. It is also built on a solid organizational foundation, ensuring process rigor, reliability and operational efficiency. Finally, a more moderate innovative component encourages initiative and adaptability to support the evolution of IT solutions.

Job description:

Within the Cybersecurity Department and the Governance, Risk, and Compliance (GRC) unit, you will contribute to the deployment and maintenance of the Group's cybersecurity governance framework. You will assist business units and technical teams in applying security requirements, monitoring compliance, managing risks, and implementing awareness actions. You will also participate in managing cybersecurity projects and monitoring security posture improvement plans.

Main tasks:

• Participate in writing, updating, and maintaining the Group's cybersecurity policies, standards, procedures, and frameworks.
• Ensure the communication, dissemination, and promotion of governance documents to stakeholders (mailing, workshops, webinars, awareness campaigns, etc.).
• Monitor compliance with cybersecurity requirements and processes (integration of security in projects, vulnerability management, access reviews, documentary compliance, etc.) and track remediation actions with relevant stakeholders.
• Manage or contribute to Cyber projects (information protection, third-party management, etc.)
• Manage communication / awareness projects (e.g., implementing e-learning for IT administrators, regular awareness for developers, etc.)

Profile sought:

• Master's degree (Bac+5) in cybersecurity, IT, or equivalent.
• 4 to 8 years of experience in Information Security Governance / Cybersecurity or Cyber project management.
• Good knowledge of information security frameworks, risk management processes, and compliance requirements.
• Excellent writing, communication, and presentation skills.
• Rigor, autonomy, analytical and synthesis skills.

• Ability to work in a team and manage projects.

• Curiosity, adaptability, and teamwork spirit.
• Good professional English level, both written and spoken.