Gentis
Gentis
Home

JobsMissionsMediaUse cases
You can reach us anytime via
hello@gentis.com

Vacancies

Find your dream job

Information Security Associate Manager (ISM)

09/08/2025
PermanentMoroccoHybrid
Copied to clipboard
Job description

Rattachement hiérarchique

  • Manager hiérarchique : Risk & Compliance Manager
  • Manager fonctionnel : Chief Information Security Officer (CISO)

Lieu

  • Casablanca

Périmètre du poste

Le Information Security Associate Manager est le responsable opérationnel et process owner des activités liées à la protection de la confidentialité et de l’intégrité des données critiques de l’entreprise (clients, employés, partenaires).
Il veille à la conformité des pratiques locales avec les stratégies de sécurité définies par le CISO HQ, afin d’atteindre les objectifs et standards de l’organisation.

Missions principales

  • Gouvernance & Politiques
    • Définir, mettre en œuvre et maintenir les politiques et procédures locales de sécurité de l’information.
    • Garantir l’alignement avec les stratégies globales définies par le CISO HQ.
    • Identifier, évaluer et gérer les risques de sécurité, réaliser des audits internes et proposer des plans de remédiation.
  • Sensibilisation & Formation
    • Développer et animer des programmes de sensibilisation à la sécurité auprès des employés, partenaires et prestataires.
    • Former les nouveaux arrivants aux bonnes pratiques de sécurité et aux politiques internes.
  • Suivi & Conseil
    • Agir comme consultant interne en sécurité pour les projets et systèmes de l’entreprise.
    • Examiner et valider les plans de sécurité mis en œuvre dans les systèmes et réseaux de l’organisation.
    • Assurer la liaison avec les équipes IT pour veiller à la conformité et remonter les incidents non résolus.
  • Contrôle & Conformité
    • Surveiller et tester régulièrement les contrôles de sécurité pour garantir l’accessibilité et l’intégrité des données.
    • Maintenir et superviser le Système de Management de la Sécurité de l’Information (ISMS) pour atteindre et conserver les certifications ISO 27001 et WLA-SCS.
    • Assurer le maintien du Business Continuity Management System (BCMS).
  • Gestion de crise & Continuité
    • Participer à la gestion des incidents majeurs et aux plans de reprise après sinistre.
    • Coordonner les activités de continuité et de récupération des données en cas de crise.

Compétences techniques clés

  • Gouvernance de la sécurité (ISO 27001, ISMS, BCMS)
  • Évaluation et gestion des risques
  • Plan de continuité et reprise d’activité (BCP / DRP)
  • Sensibilisation et formation à la sécurité
  • Conformité réglementaire et audit interne
  • Suivi des tendances et évolutions technologiques en cybersécurité


Profile description

Compétences comportementales (Soft Skills)

  • Excellente communication orale et écrite en anglais et en français
  • Rigueur, organisation et sens des priorités
  • Leadership transverse et capacité à influencer positivement les parties prenantes
  • Esprit d’analyse et approche proactive dans la gestion des risques

Formation & Certifications

  • Formation : Licence ou Master en informatique, cybersécurité ou domaine connexe
  • Certifications fortement appréciées :
    • CISSP, CISM, CISA
    • ISO 27001 Lead Implementer / Lead Auditor
    • Toute certification complémentaire en sécurité de l’information constitue un atout
Job location
We are looking to fill 1 positions.
Copied to clipboard

Similar jobs

Compliance & Regulatory Affairs
13/08/2025

Third-Party Risk Manager – NIS2 Compliance

Position Overview: The Third-Party Risk Manager is responsible for overseeing and mitigating information security risks related to external suppliers, service providers, and business partners. The primary objective is to ensure strict compliance with the NIS2 Directive and international standards such as ISO 27001, safeguarding the organisation from risks introduced by third parties.Develop governance structures and processes for third-party risk management, ensuring integration with overall compliance frameworks.Evaluate and classify suppliers based on criticality and risk profile, using established methods aligned with NIS2 requirements.Conduct due diligence and risk assessments for external partners, with a focus on regulatory compliance and risk mitigation.Collaborate closely with internal stakeholders including CISO, procurement, IT, and legal teams, to embed robust security clauses and processes throughout the supplier lifecycle.Monitor ongoing compliance through the implementation of KPIs, SLAs, audits, and data-driven reporting dashboards.Manage incident reporting and escalation with third-party suppliers in accordance with NIS2 Directive timelines and best practices.Organise awareness and training sessions for suppliers, focusing on supply chain security and adherence to NIS2 requirements.Act as the central point of contact for all matters relating to third-party information security risk management and NIS2 implementation.Requirements:Demonstrable background in information security, cybersecurity, or risk management roles.Thorough knowledge of the NIS2 Directive and/or international standards such as ISO 27001.Proven experience managing suppliers, conducting audits, and defining security clauses in contractual agreements.Advanced skills in communication, reporting, and stakeholder engagement.Fluency in Dutch or French, and professional proficiency in English is essential for this role.

Fixed termBelgiumHybrid
Compliance & Regulatory Affairs
04/08/2025

Consultant(e) - Chef de Département Conformité

Chef de Département Conformité – Management de Transition basé à Paris, responsable de piloter la stratégie conformité au sein d’un environnement réglementaire exigeant. Le poste comporte la supervision d’équipes dédiées à la conformité ainsi que la gestion de projets de transition et de transformation organisationnelle.Élaborer et actualiser les politiques internes en matière de conformité pour garantir le respect des obligations légales et réglementaires.Assurer une gestion proactive du risque, en déployant des méthodologies d'évaluation, de contrôle et de suivi des risques liés à la conformité.Consolider la gouvernance et veiller à l’alignement des procédures avec les exigences normatives nationales et internationales.Diriger les missions de changement organisationnel dans un contexte de management de transition, en accompagnant les équipes vers l’intégration de nouvelles pratiques.Gérer les relations avec les parties prenantes internes et externes (instances dirigeantes, supervision, autorités de régulation) pour garantir l’adhésion aux standards de conformité.Assurer le suivi des audits, la documentation des processus et la coordination des plans d’actions correctifs.Intervention dans des situations complexes nécessitant une expertise pointue en matière réglementaire, une forte capacité de leadership ainsi qu’une solide expérience de gouvernance et de transformation organisationnelle dans le secteur de la conformité.

Fixed termFranceHybrid
Compliance & Regulatory Affairs
04/08/2025

FREELANCE AML Analyst

Junior AML Analyst – Second Line Compliance focuses on supporting the organization's compliance framework, particularly within the second line of defense. The primary responsibilities include monitoring and investigating suspicious financial alerts, performing sanction screening, and ensuring rigorous adherence to Anti-Money Laundering (AML) practices. Conduct detailed review and assessment of system-generated alerts related to potential money laundering or terrorist financing activities.Carry out sanction screening for clients and transactions to identify matches with global watchlists and embargoed entities.Assist in the development, review, and update of internal policies to comply with banking laws and regulatory standards.Identify and escalate suspicious patterns for further investigation to ensure robust fraud detection and mitigation.Collaborate with various compliance teams to provide accurate documentation and reporting in both English and French.Support the ongoing effectiveness of the organization’s compliance program within the context of both the second and third line of defense.Remain up-to-date with ever-evolving regulations related to AML and compliance management in the financial sector.The role is essential for safeguarding the institution, maintaining operational integrity, and meeting legal requirements in a dynamic regulatory landscape.

Fixed termBelgiumHybrid
Compliance & Regulatory Affairs
18/07/2025

VP Compliance – Financial Crime & Regulatory (UAE National)

Role Overview: As the VP Compliance – Financial Crime & Regulatory, you will lead compliance operations for a digital-first bank, focusing on both Financial Crime Compliance and Regulatory Compliance. Reporting directly to the CCO, you will ensure the bank’s activities meet stringent regulatory and anti-financial crime obligations within the UAE’s evolving digital banking landscape.Corporate Governance: Oversee all compliance functions to ensure alignment with UAE laws and global best practices for digital banking.Financial Crime Compliance: Drive anti-money laundering and counter-terrorism financing initiatives, including risk assessments, KYC processes, and ongoing customer due diligence.Regulatory Engagement: Interface regularly with UAE regulators to maintain open channels of communication, clarify expectations, and manage audits or inspections.Policy Development: Develop, implement, and update compliance frameworks, policies, and controls to reflect regulatory changes and business growth.Monitoring & Reporting: Oversee monitoring programs to identify, investigate, and report suspicious activity internally and to relevant authorities.Team Leadership: Build, develop, and lead teams to execute compliance programs, fostering coordination and ensuring high standards of ethics and integrity throughout the bank.Stakeholder Management: Collaborate with internal departments and management to embed compliance into business operations and digital products.Requirements include deep expertise in anti-money laundering (AML) practices, KYC, and broad regulatory compliance within banking or fintech. Familiarity with UAE digital banking regulatory expectations, fluency in English, and strong policy development skills are essential. Arabic proficiency is beneficial.

PermanentUnited Arab EmiratesHybrid
Finance
07/07/2025

Risk Officer

Risk Officer – Internal Controls & Risk AssessmentThis position is responsible for evaluating and enhancing the organization’s internal control environment, with a focus on identifying control weaknesses and recommending improvements. The role includes:Assessing internal control systems through regular reviews and evaluations of control procedures, processes, and policies to confirm their effectiveness in meeting organizational objectives and mitigating risk.Performing control testing to verify that controls are functioning as intended, using walkthroughs, periodic internal verifications, and compliance reviews to ensure adherence and desired outcomes.Monitoring incidents and deficiencies by tracking issues in the control environment, collaborating with process owners to implement corrective actions, and ensuring timely resolution.Recommending enhancements to remediate control deficiencies and strengthen internal controls, working jointly with management and process owners to deploy and monitor these improvements.Developing and documenting internal control policies, procedures, and guidelines, ensuring clarity, effective communication, and alignment with best practices and industry standards.Risk Identification and Assessment: Identifying organizational risks and vulnerabilities, conducting risk assessments to evaluate impact and likelihood, and determining if current controls are sufficient to mitigate these risks.Collaborating with stakeholders across departments to prioritize risks and develop tailored risk management strategies.Facilitating information flow related to controls, ensuring awareness and compliance across the organization.Proficiency in English, French, and Dutch is highly valued in this role.

PermanentBelgiumOn site

The perfect match is only one step away.

Send us your CV directly and we will put you in touch with one of our specialised recruiter who will guide you in the search of your dream job!

Phone number
Phone
Candidates

Testimonials

“The Gentis consultants have always taken a number of factors into account in order to present us with the right candidates. The people we've recruited are still here, and personally I'm very happy with the new additions to the team.”
Joakin / Deputy-AMLCO, PPS
“The outcomes were impressive! Over 3 to 4 years, we’ve closed more than 20 deals. Gentis provides a seamless channel to connect with candidates via various avenues.”
Morgan / HR, CAF
View use cases
Blog

Recruitment articles

15 min read
17 Jan 2025

How to implement your employer brand strategy in 7 steps

Employer branding is a marketing concept that is essential for any company that wants to support its attractiveness and promote loyalty among its talent. While the reasons to build a solid and positive employer brand are clear, you cannot simply wave a magic wand for it to be successful. It requires a series of actions.

10 min read
05 Aug 2024

Essential employer branding trends in 2024

Employer branding has become essential for companies that want to stand out in the war for talent. In 2024, your employer brand should be authentic, embrace diversity and be flexible to attract the best profiles.

15 min read
15 May 2024

Employer branding: 7 mistakes you don’t want to make

Back Market, KPMG, Dassault, Shine… These different sized companies all have a strong employer brand that ensures their attractiveness and loyalty and makes their competitors pale by comparison.

Employer Branding
View all

Join our vibrant community of professionals and discover your potential to make a difference in the world.

Stay up to date with our latest news!