Digital Operational Resilience Officer

EQUANS

Equans is a world leader in the energy and services sector, with annual revenues of nearly €19,2 billion* and almost 800,000 projects.​

Equans has leading positions in Europe, which is the result of the history of energy construction in these countries, and strong presences in North and South America and in Oceania.​

With nearly 90,000 highly skilled employees, Equans has a strong geographic footprint, anchored by historic local brands. Equans provides its customers with excellent technical expertise in the design, installation, maintenance and operation of multi-technical facilities. This know-how is based on key skills. First of all, in electrical and thermal engineering - two strong points that help accelerate the reduction of our clients' carbon footprint - but also in ventilation, refrigeration, mechanics and robotics, fire protection, energy renovation, digital solutions, IT, cyber security and telecommunications.​

The combination of these expertise allows us to offer efficient and optimised solutions at all stages of the energy chain, from production, storage and transport to usage.

(*) Turnover 2024 consolidated

DIGITAL OPERATIONAL IT RESILIENCE OFFICER

Summary of the role:

Cybersecurity is part of Equans Group Core values. At Group level, the Governance, Risk and Compliance team provides a foundation of security policies, risk management practices, and compliance, cybersecurity awareness initiatives and third party risk management across Equans.
Job Purpose: The Digital Operational IT Resilience Officer ensures our digital infrastructure can absorb, adapt to, and rapidly recover from severe operational disruptions. You will design, implement, and govern the organization’s digital operational resilience framework. Your focus will shift our IT posture from pure defense to guaranteed business survival during cyberattacks, system outages, and third-party vendor failures. Key Responsibilities:
 1. Framework & Governance:

• Define the enterprise-wide Digital Operational Resilience strategy and policy framework.
• Align IT resilience capabilities with global standards (ISO 22301, ISO 27031, NIST).
• Ensure strict compliance with regional regulations, including EU DORA and NIS2.

2. Business Continuity & Disaster Recovery (BC/DR):

• Lead the design, maintenance, and execution of IT Disaster Recovery Plans (DRPs).
• Conduct comprehensive Business Impact Analyses (BIA) to map critical assets.
• Define and enforce Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO).

3. Resilience Testing in Engineering:

• Orchestrate rigorous, regular IT resilience testing, including tabletop and live-fire simulations.
• Coordinate Threat-Led Penetration Testing (TLPT) alongside internal and external red teams.
• Analyze testing outcomes to identify vulnerabilities, tracking remediation to closure.

4. ICT Third-Party Risk Management:

• Assess the resilience capabilities of critical ICT third-party service providers.
• Audit vendor business continuity plans to eliminate single points of failure.
• Draft resilience, exit, and data-migration clauses into vendor service level agreements (SLAs).

5. Incident Response:

• Serve as a core member of the Intervention Management Team during major IT disruptions.
• Develop communication protocols for internal stakeholders, regulators, and clients during outages.
• Conduct post-incident reviews to convert operational failures into structural resilience updates.

Required Qualifications & Skills: Education & Experience:

• Bachelor’s Degree in Computer Science, Cyber Security, Information Systems, or a related field and French level at Conversational level.
• 5+ years of experience in IT Risk Management, Cybersecurity, or Disaster Recovery.
• Proven track record of implementing IT resilience programs.

Technical & Soft Skills:

• Strong understanding of enterprise architecture, network topology, and data replication.
• Excellent communication skills, with the ability to translate complex technical risks into business terms for C-suite executives.

---

by

Cyber Security Engineer

EQUANS

Equans is a world leader in the energy and services sector, with annual revenues of nearly €19,2 billion* and almost 800,000 projects.​

Equans has leading positions in Europe, which is the result of the history of energy construction in these countries, and strong presences in North and South America and in Oceania.​

With nearly 90,000 highly skilled employees, Equans has a strong geographic footprint, anchored by historic local brands. Equans provides its customers with excellent technical expertise in the design, installation, maintenance, and operation of multi-technical facilities. This know-how is based on key skills. First of all, in electrical and thermal engineering - two strong points that help accelerate the reduction of our clients' carbon footprint - but also in ventilation, refrigeration, mechanics and robotics, fire protection, energy renovation, digital solutions, IT, cyber security and telecommunications.​

The combination of thes expertises allows us to offer efficient and optimised solutions at all stages of the energy chain, from production, storage and transport to usage.

(*) Turnover 2024 consolidated

Cyber Security Engineer (F/M)

Summary of the role:

Within the EQUANS CEDE IT department, you will be part of the CEDE Cyber team, that helps the EQUANS Central Europe business entities enhancing their cybersecurity posture and protecting our assets and business activities. This team is led by the MCISO CEDE and is reporting to the Global CISO.

As a Cybersecurity Engineer, you will provide high-level technical support and guidance to secure local IT assets and cloud environments for entities in the MBU CEDE region and BU Energies. You will be instrumental in vulnerability management, cloud security implementations, and technical documentation, while supporting key cybersecurity projects.

KEY RESPONSIBILITIES:

• Participate in cybersecurity audits and compliance initiatives, focusing on standards such as ISO 27001 and NIS2.
• Act as a subject matter expert during internal or external audits and assessments related to cybersecurity within CEDE.
• Monitor vulnerabilities on local IT assets and coordinate remediation efforts.
• Assist business units in securing cloud infrastructure and services, collaborating closely with the SLS Infrastructure teams.
• Support entities in documenting technical security architectures and standards for IT assets.
• Manage risk assessments, cybersecurity audits, and third-party security reviews effectively.
• Provide expert support for critical cybersecurity programs such as Cloud Migration or ISO/NIS2 certification.
• Share and promote cybersecurity best practices and technical knowledge across teams and entities.
• Ensure comprehensive and up-to-date documentation of cybersecurity risk assessments, audit results, remediation plans, and third-party reviews.
• Provide technical guidance and support to business units on securing cloud environments (IaaS, PaaS, SaaS), working closely with the SLS Infrastructure teams.
• Assist and accompany projects to implement security measures for cloud deployments and hybrid architectures.
• Contribute to resilience programs by supporting Business Continuity Planning (BCP) and Disaster Recovery Planning (DRP) activities.

PROFILE:

Academic background & Experience:

• You have a higher education degree (an Engineering degree in cybersecurity or a Master’s degree in Computer Science and networks) or a proven experience as a Cyber Security consultant (more than 3 years).
• You are recognized for your expertise in securing systems, with ideally some related certifications (AWS, Azure, CEH, CCNA…) or related to cybersecurity and network security.
• Experience or training in cybersecurity risk management methodologies such as EBIOS and ISO 27005 is highly desirable.
• Proven experience with cybersecurity frameworks and compliance standards (ISO 27001, NIS2, GDPR).
• Strong knowledge of vulnerability management tools (Tenable, Nessus, WIZ), cloud security (AWS, Azure), and architectural documentation.
• Knowledge of DevSecOps practices and experience integrating security into Agile development cycles.
• Proactive and detail-oriented with a focus on quality and security.
• You have a good understanding of our clients' business challenges.

Qualifications and Skills:

• Strong analytical skills with the ability to evaluate risks and define remediation actions.
• Excellent interpersonal skills with the ability to build relationships and work cross-culturally across diverse teams and stakeholders.
• Fluent in English is mandatory; proficiency in other local languages (German, Italian, Hungarian, Czech, etc.) is highly desirable to effectively collaborate across MBU CEDE countries.
• Ability to work collaboratively with both local IT teams and centralized support services (SLS).
• Proactive, adaptable, and able to work independently in a multi-country, multi-cultural environment.
• Strong problem-solving skills coupled with a collaborative, team-oriented mindset.
• Excellent organizational and time-management skills with attention to detail.
• Confident communicator, capable of explaining complex technical or compliance topics clearly to non-experts.
• Competency and knowledge to conduct thorough cybersecurity risk assessments, audits, and third-party security evaluations.
• Strong attention to detail with the ability to maintain accurate and thorough cybersecurity documentation.
• Knowledge and practical skills in conducting risk assessments using recognized frameworks like EBIOS and ISO 27005.
• Ability to perform technical security tests (e.g., vulnerability scanning, penetration testing support) when required.

Why Join Us?

• Global Impact: Influence cybersecurity across a multinational company.
• Challenging Projects: Work IT and Cybersecurity transformation program with real business impact.
• Collaborative Culture: Work with experts in cybersecurity, cloud.

---

by

GRC Analyst

EQUANS

Equans is a world leader in the energy and services sector, with annual revenues of nearly €19,2 billion* and almost 800,000 projects.​

Equans has leading positions in Europe, which is the result of the history of energy construction in these countries, and strong presences in North and South America and in Oceania.​

With nearly 90,000 highly skilled employees, Equans has a strong geographic footprint, anchored by historic local brands. Equans provides its customers with excellent technical expertise in the design, installation, maintenance, and operation of multi-technical facilities. This know-how is based on key skills. First of all, in electrical and thermal engineering - two strong points that help accelerate the reduction of our clients' carbon footprint - but also in ventilation, refrigeration, mechanics and robotics, fire protection, energy renovation, digital solutions, IT, cyber security and telecommunications.​

The combination of thes expertises allows us to offer efficient and optimised solutions at all stages of the energy chain, from production, storage and transport to usage.

(*) Turnover 2024 consolidated

GRC analyst (F/M)

Summary of the role:

Within the EQUANS CEDE IT department, you will be part of the CEDE Cyber team, that helps the EQUANS Central Europe business entities enhancing their cybersecurity posture and protecting our assets and business activities. This team is led by the MCISO CEDE and is reporting to the Global CISO.

As GRC Analyst, you will play a critical role in driving compliance, risk management, and governance across multiple European business units. You will coordinate audits, manage regulatory alignment, and help strengthen cybersecurity governance and awareness within the MBU CEDE countries (Italy, Germany, Austria, Hungary, Czech Republic) and BU Energies in France.

KEY RESPONSIBILITIES:

• Participate in cybersecurity audits and compliance initiatives, focusing on standards such as ISO 27001 and NIS2.
• Plan and deploy awareness and training campaigns tailored for the countries within the Business Unit.
• Identify, assess, and monitor cyber risks in collaboration with local IT departments, and develop actionable risk mitigation plans.
• Enhance governance frameworks including reporting and escalation processes for cybersecurity compliance indicators.
• Support continuous improvement of cybersecurity policies, procedures, and controls in line with evolving regulations and organizational needs.
• Act as a subject matter expert during internal or external audits and assessments related to cybersecurity within CEDE.
• Maintain cybersecurity baseline in business projects

PROFILE:

Academic background & Experience:

• You have a higher education degree (an Engineering degree in cybersecurity or a Master’s degree in Computer Science and networks) or a proven experience as a Cyber Security consultant (more than 3 years).
• Proven experience with cybersecurity frameworks and compliance standards (ISO 27001, NIS2, GDPR).
• You are recognized for your expertise in securing systems, with ideally some related certifications (CISSP, CISM, GSEC, ISO 27005) or certifications related to the cybersecurity.
• You have a good understanding of our clients' business challenges.

Qualifications and Skills:

• Strong analytical skills with the ability to evaluate risks and define remediation actions.
• Excellent interpersonal skills with the ability to build relationships and work cross-culturally across diverse teams and stakeholders.
• Fluent in English and German are mandatory; proficiency in other local languages (Italian, Hungarian, Czech, etc.) is highly desirable to effectively collaborate across MBU CEDE countries.
• Ability to work collaboratively with both local IT teams and centralized support services (SLS).
• Proactive, adaptable, and able to work independently in a multi-country, multi-cultural environment.
• Strong problem-solving skills coupled with a collaborative, team-oriented mindset.
• Excellent organizational and time-management skills with attention to detail.
• Confident communicator, capable of explaining complex technical or compliance topics clearly to non-experts.

Why Join Us?

• Global Impact: Influence cybersecurity across a multinational company.
• Challenging Projects: Work IT and Cybersecurity transformation program with real business impact.
• Collaborative Culture: Work with experts in cybersecurity, cloud and compliance.

---

by