Mission freelance Cybersecurity Expert/Minimum Technical Security Baseline

Context

We are looking for the service of an external MTSB (Minimum Technical Security Baseline) V3 framework Consultant. Within the Group Information Security team as part of One trust Program (2024-2026) strategic program of Group Security) The Service 's mission consists of providing technical expertise on the \"Minimum Technical Security Baseline\" project in terms of defining technical security baselines together with the client Product SMEs, supporting teams in charge of security controls implementation/remediation and preparing follow-up for committees. This support will be performed under the management of an Information Security lead in charge of MTSB.

Scope of Service- The Service would be focused on:
- Defining or updating MTSB baselines:
o Select relevant CIS Benchmark controls or fine tune new controls to cover the client risks
o Organize workshops with the client products SMEs to finetune security controls (applicability to the client context, impact analysis for measurement/remediation)
o Validate selected controls within the CIWG (Control implementation working group) together with the client products and the client entities
- Updating the MTSB framework with the updated baselines
- Providing follow-up inputs for steering committees
- Supporting the client product teams and entities on MTSB baselines

Expertise
o The Service will interact technically with IT and security products SMEs to agree on security controls -and to deep dive on technical expertise topics
o The Service will converge in governance body on the selection of security controls
o The Service will do a close and accurate follow-up of a large security controls framework (+100 high level controls and several thousands low level controls)