Security Engineer - GRC

📋 Description Own and operate the ISO 27001 ISMS Be the security expert on regulatory and privacy matters (DORA, HDS, RGPD, PGSSI-S) Run risk as an ongoing programme, in partnership with the broader risk function Own the controls framework, but distribute ownership of controls themselves Run audit cycles with rigour, in close partnership with Internal Audit Manage third-party risk 🎯 Requirements Led at least one full ISO 27001 certification or recertification cycle Experience with EBIOS RM risk cartography Understanding of ANS framework and CERT Santé requirements Experience managing security audit programmes and coordinating with certification bodies Experience conducting vendor security assessments and defining contractual security requirements Ability to translate risk into business language for board or audit committee 🎁 Benefits Board and executive exposure Real influence on company-wide risk decisions Autonomy to shape Alan's security culture across 800+ people Remote work flexibility Perks & Benefits: stimulating environment and perks ensuring they are happy, efficient and A strong culture with innovative working method and cultural values