【Rules concerning the Segregation of Duties】
・Control of system risks (Research, Analysis and Planning related to Group requirement)
・Management of IT security (Research, Analysis and Planning related to Grouprequirement)
・Management of BCP (Research, Analysis and Planning related to Group requirement)

【Main duties 】
・Schedule /Task management related to System risks / IT Security (IAM, access management, applications profiles, security incidents,vulnerability, pentest, back up, obsolescence, encryption, support to IT, support to business）
・Project related work (local or from Head Office), related to security, risks, data and aligned with Group policies, French, European and local regulations
・Operational risk management (risk analysis, assessment, mitigation,covering on premise and cloud (SOC reports)
・Appropriate management of Outsourcing governance . Understand the regulations and adapt the entity outsourcing management in order to respect them i n terms of security, risk, quality, resilience, BCP, assessment…
・IT Personal information management d ata management, data quality reporting ,application and changes of Group rules and regulations
・Understanding of architecture and infrastructure (technical and functional flows ) including on premise and c loud c omputing management
・Provides Data Governance & System risks / IT Security training awareness to all staff
・Technology watch on cyber threat, AI, encryption, etc
・Documentation creation, update, translation sometimes
・Group security and standards review and adaptation to local rules . Application of FSA guidelines
・Audit recommendations closing (internal, Group,
・Collaboration with other departments on different topics
・Meeting preparation (Risk committees, Security workshops, IT meetings,……)), meeting lead or active participation with CxO level (Local and Head Office) on different topics
・BCP preparation and participation


※上記に加えて部署としてはデータガバナンスの領域も管轄になるため、将来的には担っていただく可能性がございます。