Description
Project Manager - redesign of general computer controls and security
Description of the mission
Our client in Paris is looking for an experienced French/English speaking consultant to support the redesign of the device controls the IT Department on general computer risks and the risks of computer security as well as their formalization in contracts governing the outsourcing of it services providers.
Position in the company
The candidate will integrate the Business Management team within the it Department of the organisation. Business Management team is responsible for the definition and implementation of the Tracker of operational risks and the controls for all of the it Department.
The consultant will have both a role of definition/drafting/implementation in place of a new device of computer controls and a role of coordinator between the various entities involved (internal and external interlocutors).
Framework of the mission
After being informed of the context, contractual, technical and organizational environment, and the current of computer controls, the consultant will take place primarily on the following activities:
Definition/drafting/implementation of a new device it controls:
- Definition of a new mechanism of level 1 on general risk and information security controls, according to the regulatory requirements of the Decree of November 3, 2014 relative to internal control, some of which to be directed by vendors providing outsourcing of the computer system of the company. This new device will include:
- The list of controls requested by the company to its providers/outsourcers to ensure the quality of the services provided
- The definition of deliverables related to controls to be provided by the outsourcers to the company
- The modalities of analysis of these elements by teams of the company
- Drafting of new contractual annexes defining the new controls made by the outsourcers (annexes to add to existing contracts).
- It teams supporting internal in the application of the new system of controls of level 1 and proposal of a new organization target to place this device on a regular and recurring
Coordination/organization
- Formalization of States reporting of progress of this project with the governance of the program.
- Coordination of all of the internal actors (IT, 2nd line of defense security, 2nd line of defense operational risk and internal control) and external (it service providers)
Required skills
- Must speak fluent French and English
- Experience in the definition and implementation of general computer controls and computer security (according to the provisions of the Decree of November 3, 2014) within a DSI using at some companies.
- Experience of outsourcing of computer services of type Service Level Agreement contracts
- Good knowledge of the process IT (ITIL knowledge)
- Project management: methodology, rigour, autonomy.
- Essential common English: professional exchanges and documentation are in English (language of work) and part of the interlocutors are English-speaking
- Very good skills in oral and written communication
- MI reporting tools.