{"id":1488705,"url":"https://alion.io/job/sonepar-cyber-grc-specialist","title":"Cyber GRC Specialist","company":{"id":1942969,"name":"Sonepar","domain":"sonepar.com","url":"https://alion.io/company/sonepar-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":{"grade":"A","score":100,"open_postings":17,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":20,"computed_at":"2026-10-23T05:54:15Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Paris, France"],"countries":["FR"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":41000,"max_usd":82000,"period":"year","method":"role_country_seniority_unknown","sample_n":122},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":false},{"name":"NIST 800-53","optional":false},{"name":"NIST CSF","optional":false}],"status":"live","first_seen_at":"2026-09-25T02:01:00Z","employer_posted_date":"2026-09-25","last_verified_at":"2026-10-23T21:24:30Z","board_verified":true,"closed_at":null,"days_open":28,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":28},"description":"Who are we?\nSonepar is anindependent family-owned group and a world leader in the distribution of electrical equipment, solutions and related services to the trade. In 2025, Sonepar generated a turnover of €33.6 billion. With a presence in 40 countries and an extensive network of retail outlets, the Group is undertaking an ambitious transformation to make life easier for its customers by offering them an omnichannel experience and a range of sustainable solutions for the industrial, construction and energy sectors. Our 46,000 employees are committed to the electrification of the world and united by a shared Purpose: “Power Progress for Future Generations.\nHow will you shape our tomorrow\nAs part of the strengthening of the Group’s cybersecurity governance, we are looking for a Cyber GRC Specialist with relevant initial experience in Governance, Risk & Compliance. Versatile, rigorous and proactive, you will contribute to a broad range of topics, including the cybersecurity documentation framework, risk assessments, controls, compliance, TPRM and awareness.\nReporting to the Cyber GRC Director within Sonepar Digital’s Cybersecurity & Infrastructure team, you will operate in an international, English-speaking environment. You will work with Group Cyber teams, the Regional Directors for the Americas, APAC and Europe, cross-functional teams including Enterprise Risk Management, Internal Control, Internal Audit and Legal, as well as Group entities.\nYour role will be to contribute to the operational implementation of the Cyber GRC strategy and make cybersecurity requirements and risks clear and actionable. You will engage with Business teams, understand their constraints and support their decision-making by providing a clear view of risk.\nYou will progressively take ownership of end-to-end topics with a good level of autonomy, while receiving support from the Cyber GRC Director whenever needed.\nWhat success looks like ?\n-The Group Cyber GRC documentation framework is developed and maintained in collaboration with Domain and Regional Directors when required.\n-Cyber risk assessments are completed, clearly presented and translated into actionable recommendations for decision-makers.\n-Cybersecurity assessments of solutions and third parties provide a clear view of risks and required remediation actions.\n-The implementation of Cyber requirements is effectively assessed with the relevant support functions, and identified gaps are appropriately followed up.\n-Awareness initiatives are designed and delivered to strengthen the understanding of cyber risks and expected practices across the Group.\n-Risk-based audit campaigns are defined and coordinated with the Cyber GRC Director, with clear findings and remediation priorities.\nProfile\nYou are an experienced cybersecurity professional with a focus on Governance, Risk & Compliance. You have already contributed to several GRC topics and are looking to progressively broaden your scope in an international and evolving environment.\nYou are comfortable working with technical, Corporate and Business stakeholders. You can formalize a need, analyze a risk, propose an approach and produce clear deliverables. You know when to seek guidance, support or a decision.\nYou are comfortable translating a framework into operational implementation and explaining cyber issues in terms of business impacts and decisions.\nThe experience you bring\nTechnical Skills\nGood understanding of key cybersecurity and risk management frameworks, including NIST CSF, NIST 800-53 and ISO 27001/27002/27005.\nExperience in drafting or maintaining policies, standards, requirements, controls or evidence requirements.\nPractical experience in cyber risk assessments and the monitoring of risk treatment plans.\nAbility to produce clear, structured deliverables and reports tailored to their intended audience.\nAbility to work with global, regional and local teams in a matrix environment.\nFluent French and English, both written and spoken.\nSoft skills\nAutonomy and a proactive mindset, with the ability to seek support or escalation when required.\nClear communication and the ability to adapt your message to technical, Business and management audiences.\nAnalytical thinking, rigor and the ability to structure complex topics.\nPragmatism and the ability to prioritize based on risk and operational considerations.\nCuriosity and adaptability in a transforming environment.\nWork Mode & Location\n- Hybrid: 3 days in Paris (8ème) after the trial period\nBenefits that await you:\nThe role - Your daily activities will be interesting, stimulating and varied... No two days are alike!\nThe organisation - You'll be part of the Sonepar family and share the same values!\nThe culture - You'll be working in an international environment.\nThe team - Our dynamic, multidisciplinary, open-minded and talented team is eager to welcome additional skills to continue to meet the challenge.\n75% reimbursement of your monthly or annual transport pass.\nSwile Ticket restaurant card\nGym exclusively reserved for the company and made available to employees free of charge.\nSustainable mobility package\nHealth insurance & Welfare\nEmployee Savings Plan & Profit Sharing Bonus.\nRecruitment process\nCall with a Talent Acquisition Manager\nHiring manager's interview\nFinal HR interview\nWe are interested in knowing you more. Start an exciting new career and enjoy many employee benefits by applying online. Sonepar HQ is thankful for your interest in joining the team, only individuals selected for interview will be contacted.\nMore information on Sonepar:\nWebsite: www.sonepar.com\nTwitter: @sonepar\nLinkedIn: https://www.linkedin.com/company/sonepar/\nCheck out Sonepar on Facebook!\nTo apply, you must use a computer and one of the following browsers: Safari, Chrome, Mozilla Firefox or even EDGE.","description_format":"text","description_chars":5818,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"French","level":"Advanced (C1)","optional":false},{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Health insurance"],"hiring_locations":[{"name":"France","iso":"FR","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Hardware","Security Compliance","Electrical Equipment & Cables"],"lifecycle":[{"event":"open","at":"2026-09-30T00:08:06Z"},{"event":"close","at":"2026-10-01T06:49:52Z"},{"event":"reopen","at":"2026-10-03T17:51:05Z"}],"visa":[],"liveness":{"score":28,"band":"fade","label":"Fading","p_open":1,"p_active":0.517,"p_room":0.55,"age_days":28,"expected_fill_days":20,"reasons":["conf:26","velocity","win:tail","comp:brand"],"computed_at":"2026-10-23T05:54:15Z"},"pay":null,"html_url":"https://alion.io/job/sonepar-cyber-grc-specialist","json_url":"https://alion.io/job/sonepar-cyber-grc-specialist.json","meta":{"generated_at":"2026-10-23T23:53:09Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7576,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1942969},"rest":"https://alion.io/mcp/rest/get_company?id=1942969"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsonepar-cyber-grc-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsonepar-cyber-grc-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsonepar-cyber-grc-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sonepar-cyber-grc-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsonepar-cyber-grc-specialist"}]}