DESCRIPTION :
<h1><span>EQUANS</span></h1>
<p><span>Equans is a world leader in the energy and services sector, with annual revenues of nearly €19,2 billion* and almost 800,000 projects.</span></p>
<p><span> </span></p>
<p><span>Equans has leading positions in Europe, which is the result of the history of energy construction in these countries, and strong presences in North and South America and in Oceania.</span></p>
<p><span>With nearly 90,000 highly skilled employees, Equans has a strong geographic footprint, anchored by historic local brands. Equans provides its customers with excellent technical expertise in the design, installation, maintenance and operation of multi-technical facilities. This know-how is based on key skills. First of all, in electrical and thermal engineering - two strong points that help accelerate the reduction of our clients' carbon footprint - but also in <a href="https://www.equans.com/expertises/hvac" target="_blank"><span>ventilation</span></a>, <a href="https://www.equans.com/expertises/cooling-fire-protection" target="_blank"><span>refrigeration</span></a>, <a href="https://www.equans.com/expertises/mechanical-robotics" target="_blank"><span>mechanics and robotics</span></a>, <a href="https://www.equans.com/expertises/cooling-fire-protection" target="_blank"><span>fire protection</span></a>, energy renovation,<a href="https://www.equans.com/expertises/digital-ict" target="_blank"><span> digital solutions</span></a>, <a href="https://www.equans.com/expertises/digital-ict" target="_blank"><span>IT, cyber security and telecommunications</span></a>.</span></p>
<p><span> </span></p>
<p><span>The combination of these expertise allows us to offer efficient and optimized solutions at all stages of the energy chain, from production, storage and transport to usage.</span></p>
<p><span> </span></p>
<p><span>EQUANS Group IT is organized around <strong>Shared Line of Services (SLS)</strong> delivering global IT services and platforms to all EQUANS entities worldwide.<br>The <strong>Group Applications Shared Line of Services (SLS Group Apps)</strong> is responsible for d</span>elivering IT projects and services aligned with business priorities, quality and cost objectives</p>
<p> </p>
<p><span>Within this organization, to support the cybersecurity roadmap and contribute to broader cybersecurity activities, we are looking for a Cybersecurity Apprentice – Cybersecurity Posture & Governance, based in Courbevoie, working closely with the S-CISO for Group Apps & Data and stakeholders within these SLSs.</span></p>
<p><span> </span></p>
<p><span>This apprenticeship is a great opportunity to contribute to high-impact cybersecurity governance initiatives in an international environment, while developing practical experience in governance (ISO27001), cyber risk management, compliance, vulnerability follow-up, security reporting and continuous improvement.</span></p>
<p><span> </span></p>
<p><em><span>(*) Turnover 2024 consolidated</span></em></p>
<h1><span>Cybersecurity Apprentice – Cybersecurity Posture & Governance (F/M)</span></h1>
<p><span> </span></p>
<p><u><span>Summary of the role</span></u></p>
<p> </p>
<p>As a Cybersecurity Apprentice, you will support the S-CISO for Group Apps & Data in the monitoring and continuous improvement of cybersecurity controls, with a focus on security governance, compliance and cybersecurity posture.</p>
<p> </p>
<p>You will work closely with cybersecurity teams, IT service owners, application owners, architects, operational teams to help structure evidence, follow action plans, support risk management activities and improve cyber governance.</p>
<p>The role is international by nature and requires curiosity, rigor, autonomy and the ability to interact with multiple stakeholders across IT and business teams.</p>
<p> </p>
<p><u><span>KEY RESPONSIBILITIES</span></u></p>
<p> </p>
<ol>
<li><strong> Security Governance & Documentation Support</strong></li>
</ol>
<ul>
<li>Assist the S-CISO for Group Apps & Data in maintaining and improving cybersecurity governance documentation</li>
<li>Collect, classify and structure evidence or supporting materials when required</li>
<li>Help identify documentation gaps, inconsistencies or missing inputs for review</li>
<li>Contribute to the follow-up of action plans related to security governance and control improvement</li>
</ul>
<p> </p>
<ol start="2">
<li><strong> Security Risk & Control Follow-up</strong></li>
</ol>
<ul>
<li>Support the preparation and documentation of security risk review activities</li>
<li>Help collect information from application owners, service owners, architects and IT operations teams</li>
<li><strong>Document risks, existing controls and mitigation actions</strong> based on inputs</li>
<li><strong>Maintain trackers related to risks, controls, remediation actions</strong> and follow-up items</li>
<li>Follow up on agreed actions and highlight missing inputs or overdue items</li>
<li>Prepare draft reporting materials for review</li>
</ul>
<p> </p>
<ol start="3">
<li><strong> Compliance & Audit Readiness Support</strong></li>
</ol>
<ul>
<li>Assist with the <strong>operational follow-up of cybersecurity compliance</strong> activities</li>
<li>Help maintain documentation repositories and compliance trackers</li>
<li><strong>Support the collection and organization of evidence</strong> for internal reviews or audit readiness activities</li>
<li><strong>Help consolidate cybersecurity KPIs</strong> / KRIs and prepare dashboard inputs</li>
<li>Support the preparation of cybersecurity governance meetings and status updates</li>
<li><strong>Contribute to continuous improvement activities</strong> through documentation, analysis and reporting support</li>
</ul>
<p><u><span>TECHNICAL SKILLS & TOOLS</span></u></p>
<ul>
<li><span> Good understanding of general IT concepts, including systems, networks, applications and cloud environments</span></li>
<li><span> <strong>Basic knowledge of cybersecurity principles</strong>, such as access management, vulnerability management, risk management and security controls</span></li>
<li><strong><span> Interest in cybersecurity governance, risk</span></strong><span> and compliance activities</span></li>
<li><span> Familiarity with security frameworks or standards would be appreciated</span></li>
<li><span> Ability to work with documentation, evidence collection, action plans and follow-up trackers</span></li>
<li><span> Good command of Microsoft 365 tools, including Excel, PowerPoint, SharePoint and Teams</span></li>
</ul>
<p><span> </span></p>
<p><u><span>SOFT SKILLS</span></u></p>
<ul>
<li><strong><span>Rigorous</span></strong><span>, structured and detail-oriented</span></li>
<li><span>Analytical mindset and <strong>good synthesis skills</strong></span></li>
<li><span>Good communication skills, both written and oral</span></li>
<li><span>Curious and eager to learn in cybersecurity</span></li>
<li><span>Strong sense of confidentiality</span></li>
<li><span>Able to work with IT stakeholders and external providers</span></li>
<li><span>Autonomous, collaborative and adaptable</span></li>
</ul>
<p><span> </span></p>
<p><u><span>PROFILE </span></u></p>
<p> </p>
<p><u>Academic background & Experience </u></p>
<ul>
<li><span>Master’s degree in progress, ideally Bac+4 / Bac+5, in Cybersecurity, Computer Science, Engineering, Information Systems, IT Risk, Audit or equivalent</span></li>
<li><span>Looking for a 2-year apprenticeship</span></li>
<li><span>First experience through an internship, academic project or work-study program in IT, cybersecurity, risk management, audit or compliance would be appreciated</span></li>
<li><span>Interest in cybersecurity governance, security controls, risk follow-up and compliance activities</span></li>
<li><span>Motivation to develop practical cybersecurity skills in an international IT environment</span></li>
<li><span>Ability to work on documentation, reporting and coordination activities with rigor and confidentiality</span></li>
</ul>
<p><span> </span></p>
<p><u><span>Language Requirements</span></u></p>
<ul>
<li><strong>English:</strong> fluent (spoken and written) – mandatory</li>
</ul>
<p><span> </span></p>
<p><u><span>Why Join Us?</span></u></p>
<p> </p>
<ul>
<li><span>Develop practical experience in cybersecurity governance, compliance and risk follow-up.</span></li>
<li><span>Build strong foundations in security controls, documentation, reporting and continuous improvement.</span></li>
<li><span>Work in a collaborative and international IT environment.</span></li>
<li><span>Support concrete cybersecurity activities, including evidence collection, action plan follow-up and reporting.</span></li>
<li><span>Contribute to the protection and continuous improvement of strategic Group IT services.</span></li>
</ul>
