Cybersecurity governance consultant
- €40–47k
- 2 to 5 years of experience
- Paris 13th · mostly remote
- Permanent contract (CDI)
- Posted on 8 November 2026
Your application is sent from your own mail client: blooo.io stores nothing. It is only used for this recruitment and kept only while your application stands (2 years at most), then deleted, or sooner on request. Privacy policy.
The role
You join the Cybersecurity Governance practice with 2 to 5 years of experience, alongside a senior consultant. You work on our Trusted Assessment (diagnosis) and Trusted Organisation (living governance) offers.
Responsibilities
- Identify and qualify applicable requirements (NIS2, DORA, ISO 27001, GDPR, contractual and business requirements) in a single register.
- Map the declared operational reality and measure the gaps.
- Write the policies, procedures and documentation of an information security management system.
- Link requirements, controls and evidence, and track evidence collection in compliance management tools.
- Prepare audits (ISO 27001, SOC 2, HDS) and contribute to risk assessments.
- Contribute to training plans and security steering indicators.
Profile
- 2 to 5 years of experience in information security governance, risk and compliance, in consulting or in-house.
- Good knowledge of ISO 27001/27002 and of NIS2, DORA and GDPR.
- Enough technical grounding to qualify evidence (identity, network, cloud, operations).
- Strong writing, documentary rigour, and enjoyment of working with varied stakeholders.
- An ISO 27001 (Foundation or Lead Implementer) or ISO 27005 certification is a plus.
- Fluent French and professional English, written and spoken.
Conditions
- Permanent contract (CDI), fixed gross annual salary: €40,000 to €47,000, depending on experience; meal vouchers at €14.52 per day
- A performance-based bonus on top of the fixed salary
- Mostly remote, with presence in Paris for key meetings and team events, and at clients’ premises depending on the engagement
- Offices at 198 Avenue de France, 75013 Paris (metro line 6, Quai de la Gare, close to metro lines 5 and 14 and RER C)
- SYNTEC collective agreement, health and provident insurance
- Support for training and certifications
About Blooo
Blooo is a French cybersecurity firm certified ISO/IEC 27001:2022, organised in two practices, Cybersecurity Governance and Cybersecurity Architecture. Our method, Orient, Organise, Orchestrate, replaces declarations with proof: we reconnect governance and risk decisions with the technical reality of our clients, critical entities and organisations subject to NIS2 or DORA.