Azure Security Consulant

Description du poste

Job purpose and main missions

As the GO MTSB & Azure control owner, your main objectives are to:

· 50% - GO MTSB control owner

o Monitor control scores and assess deviations: monitor the score of the controls and request action plan in case of deviations/drops are observed (critical settings are one of the key points to follow up)

o Follow up of the controls lifecycle:

§ Participate to controls lifecycle governance (CIS, new techno, obsolescence) and ensure related impacts are correctly covered.

§ Ensure / Follow up evidence delivery and accuracy: evidences and scores provided by operational team.

§ Provide inputs on score details, evidences, measurement and requirements to MTSB owners team.

§ Follow up exceptions: instruction and validation of the exceptions, follow up of the exceptions.

§ Support on blockers identification, action plans definition and follow up related escalation to enable continuous maintenance.

o Example of MTSB controls: M365 CIS hardening, OpenShift CIS hardening, Public cloud privilege accesses

· 50% - GO Azure control owner

o Perform security configuration review/security control assessments on applications hosted on Azure:

§ Relying on

· Technical controls from ISO 27002 / NIST

· Azure security hardening requirements and if not existing market best practices such as CIS benchmark

§ Activity is not limited to technical evidences assessment but also includes evidences review, conducting interviews and producing reports.