Senior cybersecurity governance consultant
- €58–70k
- 5+ years of experience
- Paris 13th · mostly remote
- Permanent contract (CDI)
- Posted on 8 November 2026
Your application is sent from your own mail client: blooo.io stores nothing. It is only used for this recruitment and kept only while your application stands (2 years at most), then deleted, or sooner on request. Privacy policy.
The role
You join the Cybersecurity Governance practice with at least 5 years of experience. You lead the substance of our Trusted Assessment and Trusted Organisation engagements, from executive interviews to proof.
Responsibilities
- Run executive interviews and formalise expectations with measurable success criteria.
- Lead risk assessments (EBIOS RM, ISO 27005) and build treatment plans and roadmaps.
- Design the target governance, the security policy and the steering bodies.
- Support compliance (ISO 27001, NIS2, DORA, CRA) and security accreditation files.
- Lead engagements as delivery manager and coach consultants.
- Present a clear, defensible course to the executive committee.
Profile
- At least 5 years of experience in information systems security, including at least 3 years in risk management.
- Hands-on experience of full EBIOS RM or ISO 27005 studies, and of security accreditation.
- Strong command of ISO 27001, NIS2 and DORA.
- At ease with executives, with a strong sense of synthesis and arbitration.
- Valued certifications: ISO 27001 Lead Implementer or Lead Auditor, ISO 27005 Risk Manager, CISM, CRISC or CISSP.
- Eligibility for French national defence security clearance is a plus.
- Fluent French and professional English, written and spoken.
Conditions
- Permanent contract (CDI), fixed gross annual salary: €58,000 to €70,000, depending on experience; meal vouchers at €14.52 per day
- A performance-based bonus on top of the fixed salary
- Mostly remote, with presence in Paris for key meetings and team events, and at clients’ premises depending on the engagement
- Offices at 198 Avenue de France, 75013 Paris (metro line 6, Quai de la Gare, close to metro lines 5 and 14 and RER C)
- SYNTEC collective agreement, health and provident insurance
- Support for training and certifications
About Blooo
Blooo is a French cybersecurity firm certified ISO/IEC 27001:2022, organised in two practices, Cybersecurity Governance and Cybersecurity Architecture. Our method, Orient, Organise, Orchestrate, replaces declarations with proof: we reconnect governance and risk decisions with the technical reality of our clients, critical entities and organisations subject to NIS2 or DORA.