Cyber Security Analyst

• Function: CyberSecurity
• Country: All Areas
• Location: Courbevoie
• Supervisor: Nexans ISP CyberSecurity Director

Context : 

In 2024, the Industrial Solutions & Projects Business Group will separate from the Nexans Group to become an independent company.

Our future company, which will become a reality at the end of 2024, boasts double-digit growth, prospects for expansion in sectors at the heart of the energy and industrial transition, with an international presence close to our customers.

We manufacture and design cables and complex solutions for our industrial customers. With a balanced presence between Western Europe and Asia, and recent investments in Poland and the United States, our human-scale company is a local player with a global reach.

Over the course of this year, we will be working together to define our identity, values and working methods in line with our culture, our size and our ambitions, while building on our century-old industrial culture, the solidity of our technical skills and our proximity to our customers. Speed, responsiveness, simplicity and pragmatism will be at the heart of our approach. 

As part of our separation, we need to set up our own support teams for the central functions: Finance, Human Resources, Information Systems, Purchasing and Legal. More than 50 positions are being created to form new, autonomous teams. 

Given the innovative nature of our approach, and our desire to completely redefine our support needs and imperatives, each of these new positions offers a unique opportunity to have a direct and visible impact on the future of our company.

Nexans ISP faces emerging cyber threats with substantial impacts on its industrial activities encompassing operational, financial, reputational, compliance, and even safety concerns.

The CyberSecurity department is reinforcing its team with a resource dedicated to the Industrial Cybersecurity Risk.

Purpose : 

• She/he is the dedicated CyberSecurity partner of the Nexans ISP industrial community,
• She/he contributes to the definition and implementation of the industrial CyberSecurity strategy within Nexans ISP Factories,
• She/he defines and implements Rules & Policies dedicated to industrial CyberSecurity,
• She/he develops and implements security solutions and processes,
• She/he ensures, through audits and assessments, the level of protection and cyber resilience of our factories,
• She/he participates to the industrial CyberSecurity Incident management process,
• She/he defines, manages and report Industrial Cybersecurity KPIs for her/his whole activity.

Responsabilities :

• Management & Reporting
  • Supervision of the CyberSecurity risks applied to Nexans ISP industrial activities, 
  • Define and regularly measure CyberSecurity KPIs.
• Strategy & Program
  • Define the industrial CyberSecurity strategy in alignment with Nexans ISP business stakes and regulations,
  • Ensure the deployment of this strategy thanks to Industry 4.0 Program,
• Policy & Awareness
  • Define and maintain the industrial CyberSecurity Policies, Charters, and Guidelines,
  • Control the effective deployment of the Policies and manage Security Exceptions,
  • Increase Cyber awareness through different initiatives (trainings, communication, etc.)
• Respond & Recover
  • Steer the prevention, protection, monitoring, detection, and Incident Response activities in industrial environment,
  • Contribute to the industrial Cybersecurity Crisis Management processes,
  • Contribute to the definition of the industrial Continuity Plan and Disaster Recovery Plan.
• Continuous Improvement and Operational Security
  • Ensure progressive increase of the Nexans ISP security maturity level,
  • Ensure the integration of cybersecurity within business and IT projects,
  • Ensure that third-party vendors and suppliers meet our CyberSecurity standards,
  • Implements standardized operational CyberSecurity processes, including but not limited to Security Audits & Penetration Testing, Vulnerability & Patch Management, Obsolescence Management, etc.
  • Propose security solutions to ensure the Confidentiality, Integrity, and Availability of our systems,
  • CyberSecurity watch

Expected results :

• An industrial CyberSecurity strategy effectively implemented in Nexans ISP Factories,
• An increased level of protection of our industrial assets,
• An improved Cyber Resilience level of our Factories,
• An efficient CyberSecurity Incident management response process,
• An improved CyberSecurity awareness level.

Required skills :

• 5 to 8 years’ experience in managing CyberSecurity in Industrial environments, 
• In-depth knowledge of security concepts in industrial environment,
• A good knowledge of IT security requirements related to Industry 4.0,
• Project Management skills,
• Communication skills,
• Advanced English and French,
• Excellent analytical and problem-solving skills,
• Master’s Degree in major business school or engineering school or top-class University,
• A plus would be certifications related to CyberSecurity or Information Security (ISO 24392/IEC 62443, CISSP, CISM, or equivalent).