Security Engineer Senior - GRC
Hybrid (Anywhere in France)€83k - €100kFull-timePosted 5d ago
About the role
Senior GRC-focused security engineer responsible for end-to-end security governance, risk management, and incident governance at Alan. Owns certification programs (ISO 27001, HDS, and future) and collaborates with Legal, Risk, Internal Audit, and Engineering to scale security across a growing international user base.
Responsibilities
- Make our security framework a tool for the whole company. You own the full certification cycle (ISO 27001, HDS and those to come), and turn it into something teams use every day to prioritise, not a binder for auditors.
- Bring the security view on regulation. You interpret regulatory requirements and determine how to protect data and which controls to implement.
- Run risk as an ongoing programme. You map and prioritise security risks (including AI risks), create treatment plans, and feed them into company-wide risk decisions.
- Help every team own its risks. Define the controls framework and standards, empower teams to own controls, brief the board and audit committee, and triage findings.
- Own incident governance. Triage and escalate incidents, manage business continuity and disaster recovery, and shape security aspects of regulatory incident reports.
- Be a credible partner to engineering. Engage with engineering teams early on new designs to identify control gaps (access, encryption, logging) before deployment.
Qualifications
- 6+ years in security with real GRC ownership
- Experience running a GRC roadmap in a certified or strongly regulated environment (ISO 27001, HDS, SOC 2, or regulated sectors like health, insurance or finance)
- Comfortable working with certification auditors and explaining framework requirements
- Fluent in French and English
- Ability to take a stand on risks and close real risks rather than writing many policies
Skills
Required:Security governanceRegulatory interpretationRisk managementIncident governance
Benefits
- Perks & Benefits page reference available in job description
Last updated Oct 21, 2026. Interested? Apply on the company site.
About Alan
Votre partenaire santé qui prévient, assure et accompagne au quotidien
Alan permet à chacun d’agir sur sa santé physique et mentale, en alliant le meilleur de la prévention et de l’assurance, le tout au sein d’une expérience unique.
assurancepréventionsantébien-êtremutuelle
More open roles at Alan
- Ops & Product Builder – Health Services, Belgium5d agoHybrid (Anywhere in Belgium) · Operations
- Pre-Sales / Sales Engineer5d agoHybrid (Paris, France) · Sales 🇫🇷
- Inbound Sales 🇫🇷5d agoHybrid (Paris, France) · Sales 🇫🇷
- Partnership Manager - Accountant Sector5d agoHybrid (Paris, France) · Sales 🇫🇷
- Analytics and Pricing Expert – Insurance 🇧🇪5d agoAnywhere in Belgium · Insurance