Security Engineer (Risk Management)
Orange Services · Romania
Information Technology & Services · 1,001-5,000 employees
About the role
The Security Engineer will assess and record security risks for strategic projects while maintaining a comprehensive risk map for the Board of Directors. They will also collaborate with project managers to ensure compliance with Security by Design requirements and contribute to the development of security policies.
What they look for
Requirements
Candidates must possess knowledge of IT technologies and security standards such as ISO2700x, NIST, and CIS. Experience with risk assessment methodologies like EBIOS Risk Manager and familiarity with international regulations like GDPR and NIS 2 are required.
Benefits
Full description
Publication date : Aug 04, 2026, 12:00AM
Contract duration :
How would you like to work in IT, toying with cutting edge technologies and enjoying your life? At Orange Services, it’s possible!
As one of the largest IT Hub within Orange Group, we are working internationally for both Orange corporate functions and country operations. Through a unique combination of know-how and expertise, our teams provide a broad range of IT & Business Solutions.
Come closer to #LifeAtOrange!
What we are looking for
- You will be part of Orange Innovation Romania department.
- You will have the opportunity to work transversally with various interlocutors, internally and within the Group, for a wide variety of projects (IT, Cloud, Data IA, Business Intelligence, IoT,..)
What you need to know/have
- Knowledge of IT technologies
- Knowledge of computer security good practices : ISO2700x, NIST, CIS, etc.
- Experience with security risk assessment, g. ISO27005 or EBIOS Risk Manager methodology
- Familiarity with Cyber Threat Intelligence & Vulnerability Management
- Awareness with European and international regulations, such as NIS 2, CRA, and GDPR
- Methodological & Rigorous
- Result oriented & KPI oriented
- Work in an international and multicultural environment
- Able to work in a transversal way
- Fluent in English ; French will be a plus
- Autonomous with good capability for team work
- Solid interpersonal skills
- Technical curiosity
- Synthesis skills
What you’ll be doing
- Work closely with project managers to help them assess and record security risks and to assess follow compliance with the Security by Design program requirements
- Consolidate the risks and maintain a risk map to report to the Board of Directors
- Follow the treatment plans for critical risks
- Carry out security risk assessments for strategic projects, using an ISO27005-compliant methodology (ex: EBIOS Risk Manager)
- Contribute to the implementation of security policies
What’s in it for you
- PerformanceBonuses– based on your results & the company’s
- Electronic Meal Tickets
- Medical & Life insurance for you - facilities for your family, too
- Professional GSM subscription
- Personal GSM subscription, also [because we believe in communication!]
- Special grants onSmartphones & devices; discounts for Orange products & services
- Development Platforms - Orange Learning, Trainings, Career Counselling, Coaching & Career plan mentoring
- Wellbeing Programs – we support your Zen
At Orange, only your skills matter.
Regardless of your age, gender, background, origin, religion, sexual orientation, disability, neurodiversity, or appearance, we actively encourage diversity within our teams, as it is a collective strength and a driver of innovation.Orange is a disability-inclusive employer: please feel free to let us know about any specific needs you may have.
