Crédit Agricole Corporate and Investment Bank (Crédit Agricole CIB)

Chargé de la Sécurité et Risk IT / Security and Risk IT officer H/F

Crédit Agricole Corporate and Investment Bank (Crédit Agricole CIB)

Guyancourt, France (Hybrid)

Job Type Permanent contract
Experience 6-10 years
Posted 3 weeks 4 days ago
Hybrid 6-10 years Level

About Crédit Agricole CIB

Crédit Agricole CIB is the corporate and investment bank of the Crédit Agricole group. Its Information System & Risks IT (ISR) department provides the IT platform and operations needed to support the bank’s activities and digital transformation.

Responsibilities

  • Contribute to the legacy estate security programme, including dependency mapping, vulnerability analysis and risk exposure assessment.
  • Coordinate stakeholders and support project teams in integrating security recommendations into obsolescence management.
  • Track remediation plans and produce dashboards and KPIs for security and legacy-estate obsolescence.
  • Coordinate IT resilience activities, including business continuity and recovery scenarios.
  • Monitor and act as the reference for DORA recommendations and controls.
  • Lead vulnerability remediation projects and ensure the quality of related KPIs.
  • Challenge and support project and development teams on technical security topics.
  • Deliver security awareness and training activities.
  • Contribute to security governance committees and participate in cybersecurity or safety crisis management.

Team and environment

The role is based within the CSI department’s Control Tower, under the responsibility of the security référent. CSI manages the information systems and applications for Finance, Risk and Compliance, covering approximately 300 applications. The SQY Park campus in Saint-Quentin-en-Yvelines brings together Crédit Agricole Group entities and approximately 4,800 employees.

Profile

  • Postgraduate degree or equivalent, from an engineering or business school or university.
  • 6–10 years of experience.
  • Experience in technical project management and technical coordination.
  • Strong knowledge of DevSecOps, CI/CD pipelines and containerization.
  • Knowledge of cloud security management, such as AWS or GCP, and IT risk management.
  • Curiosity, investigative skills, autonomy, rigor and strong written and verbal communication.
  • Operational English.

Tools

Microsoft Office, particularly Excel; Power BI skills to be developed at the start of the assignment. Python or another development language is an advantage.

Most positions may be eligible for remote work under the company’s double-voluntary agreement, after a successful onboarding period. The position is open to candidates with disabilities.

Similar Job Openings