Security Engineer - GRC

📋 Description

• Own and operate the ISO 27001 ISMS
• Be the security expert on regulatory and privacy matters (DORA, HDS, RGPD, PGSSI-S)
• Run risk as an ongoing programme, in partnership with the broader risk function
• Own the controls framework, but distribute ownership of controls themselves
• Run audit cycles with rigour, in close partnership with Internal Audit
• Manage third-party risk

🎯 Requirements

• Led at least one full ISO 27001 certification or recertification cycle
• Experience with EBIOS RM risk cartography
• Understanding of ANS framework and CERT Santé requirements
• Experience managing security audit programmes and coordinating with certification bodies
• Experience conducting vendor security assessments and defining contractual security requirements
• Ability to translate risk into business language for board or audit committee

🎁 Benefits

• Board and executive exposure
• Real influence on company-wide risk decisions
• Autonomy to shape Alan's security culture across 800+ people
• Remote work flexibility
• Perks & Benefits: stimulating environment and perks ensuring they are happy, efficient and
• A strong culture with innovative working method and cultural values