We're looking for a detail-oriented, pragmatic, and business-focused Cybersecurity GRC Analyst to join our Group IT Headquarters team in the Paris region (Levallois-Perret). Reporting directly to the Group GRC Manager, you will help secure Devoteam’s global operations across 25 countries and over 50 business entities. In this role, you will bridge the gap between regulatory requirements and operational IT practices, ensuring security compliance, risk mitigation, and security-by-design across global projects and third-party SaaS applications. Support the implementation, maintenance, and continuous improvement of the Group Information Security Management System (ISMS) in alignment with ISO/IEC 27001, NIS2, and DORA frameworks. Conduct comprehensive cybersecurity risk assessments and gap analyses on internal systems, applications, and architecture projects. Drive Third-Party Risk Management (TPRM) by evaluating vendors, SaaS applications, and external partners using tools such as BitSight, OneTrust, or ServiceNow GRC. Champion Security by Design by reviewing technical data flows, IAM/MFA requirements, and security controls during project onboarding before go-live. Draft, review, and maintain Group security policies, procedures, and baseline documentation (PSSI) to ensure ongoing compliance. Standardize compliance evidence collection, monitor remediation action plans, and track KPIs across all 25 country entities. Stay ahead of emerging European regulations, assisting in risk and impact assessments for the EU AI Act and GDPR compliance. Prepare clear, executive-level risk reports and dashboards for the Group GRC Manager and key stakeholders.