Cyber Security Lead Analyst

The Lead – Data Security is responsible for defining, implementing, and governing enterprise-wide data protection strategies with a focus on classification, encryption, monitoring, and lifecycle controls of sensitive data (C2/C3). This role ensures robust security controls across on-premises and cloud environments, enforcing regulatory compliance, data confidentiality, and forensic traceability.

The candidate will be responsible for governing, implementing, and ensuring audit readiness of NIST-aligned security controls, including maintaining evidences for the following data protection domains:

1. C3 File Identification and Inventory management with auditable records and ownership tracking.

2. Data Access Traceability – On-Premises (C2/C3 Unstructured Data), ensuring full forensic traceability and audit evidence.

3. Data Access Traceability – Cloud (SharePoint, Teams, OneDrive), with centralized logging and integration into security monitoring systems.

4. Data Declassification Control, ensuring proper review, approvals, traceability, and compliance with governance and regulatory requirements.

5. External Data Flows Encryption - Ensure that all sensitive data transmitted outside the organization is encrypted using approved standards, with enforced controls and verifiable evidence for audits.

6. Internal Data Flows Encryption - Govern encryption of sensitive data in transit within internal networks, ensuring protection against interception and adherence to zero-trust principles.

7. Unstructured C3 Data Encryption - Ensure encryption of highly sensitive unstructured data at rest across all storage platforms, supported by strong key management and compliance validation.

8. Protection of C3 Data in SaaS Solutions - Ensure that C3 data in SaaS platforms is secured through encryption, access controls, monitoring, and DLP, with proper configurations and audit-ready evidence of protection measures.

· At least 3-5 years’ experience within the risk security domain, security assessment and controls performer

· Individual contributor with logical thinking with problem solving abilities

· Good general knowledge of IT and IT security

· Excellent written, verbal communication and presentation skills, working with all different levels of management

· Good to have French speaking ability

· Able to build strong working relationships with peers and work as a strong team player

· Proven understanding on the applied risks and security practices in the IT domain.

· Demonstration of autonomy and proactiveness.

· Certifications like CISA, CRISC, CISSP, CISM, ISO27001 would be preferred added advantage

· Should be Quick learner & proactively take ownership

· Strong a self-starter who could operate independently and demonstrates complete ownership over assigned objectives in a "semi-structured" environment

Technical Skills:

Strong experience in:

· Data classification and discovery tools

· DLP (Data Loss Prevention) solutions

· Encryption technologies and key management

Hands-on experience in

- MS 365 Security (Purview, Defender, Compliance Center)

- Cloud security (Azure/AWS/GCP)

- Secure production knowledge

• Bachelor’s or Master’s degree in Computer Science, Mathematics, or a related field (Master’s degree preferred)
• Azure 900 and / or 500, CompTIA Security+, etc
• Strong knowledge of Information security and monitoring frameworks
• Experience conducting independent research and identifying technical security gaps
• Intermediate-level proficiency in Microsoft Excel
• Strong English proficiency (spoken, written, and read

Why Join Us

We are committed to creating a diverse environment and are proud to be an equal opportunity employer. All qualified applicants receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status”.

Business Insight

At Société Générale, we are convinced that people are drivers of change, and that the world of tomorrow will be shaped by all their initiatives, from the smallest to the most ambitious. Whether you’re joining us for a period of months, years or your entire career, together we can have a positive impact on the future. Creating, daring, innovating, and taking action are part of our DNA. If you too want to be directly involved, grow in a stimulating and caring environment, feel useful on a daily basis and develop or strengthen your expertise, you will feel right at home with us!

Still hesitating?

You should know that our employees can dedicate several days per year to solidarity actions during their working hours, including sponsoring people struggling with their orientation or professional integration, participating in the financial education of young apprentices, and sharing their skills with charities. There are many ways to get involved.

We are committed to support accelerating our Group’s ESG strategy by implementing ESG principles in all our activities and policies. They are translated in our business activity (ESG assessment, reporting, project management or IT activities), our work environment and in our responsible practices for environment protection.