GRC / Pentest Security Consultant - Casablanca

Company :

Orange Business is the part of the Orange Group that helps companies and organizations with their digital transformation. With 29,100 employees worldwide, we combine global presence with a local approach to invent new business models with our clients that unlock their full potential. In this way, we create a positive impact, both for their business and for the world around them.

What makes us different from our competitors? Our dual expertise: we are both a network operator and a digital solutions integrator. As an operator, we build and manage complex infrastructures. As an integrator, we design and manage end-to-end digital solutions.

We offer our clients solutions around 5 major cross-functional challenges: setting up their digital workspace, improving their customer experience, facilitating the rise of Industry 4.0, collecting and processing data, transforming and securing their network infrastructure.

It is because Orange Business masters all stages of digital transformation that we offer our clients the most relevant solutions.

We imagine an amazing future with our clients and our employees!

So, ready to join the adventure? 

Company culture :

Orange Business stands out for its strongly collaborative culture, placing people, trust and collective engagement at the heart of its operations. The company promotes close and supportive management, fostering autonomy, accountability and continuous skills development within a caring work environment. This collaborative foundation is reinforced by a significant innovation component, encouraging creativity, initiative and agility across teams. Structured processes support operational efficiency, while performance objectives are integrated in a balanced and sustainable way.

Job :

You will join the Consulting & Audit team of Orange Cyberdefense in Morocco as an Experienced Consultant to support our clients in securing their IS, particularly with large accounts (private, public) in the Maghreb and West Africa.

In this role, your main tasks will be:

• Conduct risk analyses (EBIOS, MEHARI, etc.)
• Implement and review the ISMS ISO 27001,
• Develop Security Policies, operational security procedures, standards, etc.
• Support compliance (Law 09.08, DNSSI, ISO27001-2, GDPR, etc.),
• Implement & raise awareness for the DevSecOps approach
• Review Cloud security measures
• Define cyber defense strategies / IS Security Master Plan
• Review architecture security
• Design and audit IT continuity and disaster recovery (ISO 22301)
• Raise security awareness
• Present results to different hierarchical levels
• Provide advice and recommendations adapted to the security problems encountered by clients.
• Maintain and test audit methodologies

Required profile :

You have a Master's degree from an Engineering School and have 2 to 5 years of experience in cybersecurity.

You have strong knowledge of our business areas. You have a team spirit, you show initiative and autonomy, you have good interpersonal skills and a sense of responsibility. You communicate equally well orally and in writing in French and English.

Obtaining an information security certification is a plus.

Head office address :

Desired personality traits :

Need for autonomy Need for reflection Ambition Involvement at work Search for new things / novelty