Mission Context

Due to increasing threats (cyberattacks, geopolitical instability, infrastructure vulnerabilities) and growing regulatory demands (e.g., NIS2, CER directives), the client is strengthening its resilience strategy.

The consultant’s mission will be to help establish and maintain a structured, proactive Business Continuity Management System (BCMS), ensuring the organization can respond effectively to crisis scenarios while guaranteeing the continuity of essential services.

A priority assignment will be to contribute to the design of a Disaster Recovery Plan (PRA) specifically for ransomware scenarios.

Main Responsibilities

The consultant will support the implementation, development, and maintenance of the BCMS, in line with international standards (ISO 22301, BCI GPG 7.0) and regulatory requirements. Key tasks include:

• Policies & Governance: Develop and maintain continuity policies, procedures, and guidelines.
• Impact & Risk Analysis: Conduct Business Impact Analyses (BIA) and risk assessments.
• Strategies & Solutions: Define continuity and recovery solutions adapted to identified risks.
• Crisis Management: Contribute to setting up and testing operational crisis coordination mechanisms.
• Awareness & Training: Organize awareness sessions, training exercises, simulations, and internal communication campaigns.
• Continuous Improvement: Monitor BCM developments and propose enhancements to strengthen resilience.

Expected Deliverables

• BIA and risk assessment reports.
• Continuity and recovery plans (including ransomware PRA).
• Awareness and training materials.
• Validation reports (tests, exercises, simulations).
• Continuous improvement recommendations for the BCMS.

Required Profile

Technical skills & certifications (must-have):

• Certification in BCM (e.g., CBCP, MBCI, AMBCI, ISO 22301 Lead Implementer/Auditor, or equivalent).
• Knowledge of BCM standards (ISO 22301, ISO/TS 22317, ISO 22361, etc.).
• Proven experience in BIA and risk assessments.
• Minimum 5 years of professional experience in business continuity or crisis management.

General skills:

• Proficiency in French (C2 level, CEFR).
• Strong communication and facilitation skills.

Sector experience (nice-to-have):

• Previous experience in the energy sector.

Practical Requirements

• Presence on-site at least 2 days per week (more may be requested depending on business needs).
• Flexibility to travel occasionally to other sites.
• Driving license and car required due to limited public transport options.