Consultant cyber‑sécurité confirmé

About the role

We are looking for a senior cyber‑security consultant to join Orange Cyberdefense’s Advisory & Audit team in Morocco. You will work with large private and public clients across the Maghreb and West Africa, helping them protect their information systems and achieve compliance with international and local regulations.

Key responsibilities

• Conduct risk analyses using methodologies such as EBIOS and MEHARI.
• Implement, review and improve the ISMS according to ISO 27001.
• Develop security policies, operational procedures and standards.
• Guide clients through compliance projects (law 09.08, DNSSI, ISO 27001‑2, GDPR).
• Introduce and promote DevSecOps practices.
• Assess and harden cloud environments.
• Define cyber‑defence strategies and security master plans.
• Review security architecture and design business continuity and disaster‑recovery solutions (ISO 22301).
• Raise security awareness, present findings to senior management and provide actionable recommendations.
• Maintain and test audit methodologies and contribute to the evolution of audit tools.

Required profile

• Proven experience as a cyber‑security consultant for large‑scale organisations.
• Strong knowledge of international security standards and regulations.
• Excellent communication skills to interact with clients and senior stakeholders.
• Ability to work both independently and within multidisciplinary teams.

Required skills

• EBIOS
• MEHARI
• ISO 27001
• ISO 22301
• GDPR
• DevSecOps
• Cloud security
• Security architecture
• Audit methodologies

What we offer

• Flexible working hours and hybrid work model.
• Access to training programmes and up‑skilling opportunities.
• Internal mobility and career growth paths within Orange.
• Health, well‑being and diversity initiatives.
• Employee referral and recognition awards.