Cdi - cyber risk assessment service manager f/h

At STMicroelectronics, we believe in the power of technology to drive innovation and make a positive impact on people, businesses, and society. As a global semiconductor company, our advanced technologies and chips form the hidden foundation of the world we live in today.

When you join ST, you will be part of a global business with more than 115 nationalities, present in 40 countries, and comprising over 50,000 diverse and dedicated creators and makers of technology around the world.

Developing technologies takes more than talent: it takes amazing people who understand collaboration and respect. People with passion and the desire to disrupt the status quo, drive innovation, and unlock their own potential.

Embark on a journey with us, where you can innovate for a future that we want to make smarter and greener, in a responsible and sustainable way. Our technology starts with you.

English version:

Do you thrive on building secure and resilient information systems? Do you have a strong interest in cybersecurity and want to develop your career in this domain? ST is seeking a talented and motivated Cybersecurity Risk Assessment Expert to join our Central Information Security department within the newly created Corporate Security Organization (CSO). You will play a key role in safeguarding the digital and industrial solutions of the company.

With the support of a pool of external consultants, the candidate will perform 360 degrees security risk assessments of IT solutions, and support the teams concerned in addressing the gaps detected, ensuring that risks are understood and managed.

Main responsibilities:

• Manage the risk assessment part of the service “Security Assurance as a Service”. Ensure the deliverables are delivered on time and of the expected quality.
• Perform business impact assessments to determine the security/availability rating of IT solutions.
• Participate in the genesis and maintenance of the yearly security assessments plan.
• Conduct thorough risk assessments of IT solutions, covering all aspects, such as:
• Identification of specific cybersecurity requirements.
• Accounts management and authentication.
• Access rights management and data protection.
• Logging and audit features.
• Adherence to the security framework (architecture, software development, contractual and regulatory aspects).
• Keep the central risk database up to date with the results of such risk assessment, ensuring that risks are documented and understood.
• Work closely with stakeholders to close the security gaps detected.
• Using the knowledge acquired from the above activities:
• Participate in the update of the company cybersecurity risk register and cybersecurity company program.
• Propose improvements in the security risk assessments methodology and tooling.
• Propose improvements in the company information security framework and monitoring activities.

Skills:

• 5+ years’ experience in cybersecurity.
• Sound knowledge of cybersecurity risk assessments / management.
• Sound knowledge of security standards (such as ISO 2700x, NIST) and regulations.
• Master in cybersecurity, IT or equivalent experience.
• Fluency in English within a professional context (written and spoken).
• Cybersecurity certifications (CISSP, CISM, CRISC, SANS…) is a plus.

Soft Skills:

• Ability to manage a team of external consultants.
• Very good problem-solving, analytical, and communication skills.
• Ability to translate technical aspects into risks and to communicate on those risks.
• Strong integrity, rigor and proactivity are a must.
• Autonomous.

ST is proud to be one of the 17 companies certified as a 2025 Global Top Employer and the first and only semiconductor company to achieve this distinction. ST was recognized in this ranking thanks to its continuous improvement approach and stands out particularly in the areas of ethics & integrity, purpose & values, organization & change, business strategy, and performance.

At ST, we endeavor to foster a diverse and inclusive workplace, and we do not tolerate discrimination. We aim to recruit and retain a diverse workforce that reflects the societies around us. We strive for equity in career development, career opportunities, and equal remuneration. We encourage candidates who may not meet every single requirement to apply, as we appreciate diverse perspectives and provide opportunities for growth and learning. Diversity, equity, and inclusion (DEI) is woven into our company culture.

To discover more, visit st.com/careers.