GRC Security Engineer — ISO 27001 & DORA Expert

Alan SA.; Henegouwen; Hybride; EUR 110 000 - 140 000; Plein temps

Avantages offerts par ce poste

Stimulating environment

Remote work flexibility

Résumé du poste

Alan SA is seeking a Governance, Risk & Compliance professional to own the ISO 27001 ISMS, drive internal audits, and coordinate with Legal, Internal Audit, and Risk teams. You will translate complex regulations into practical security controls and manage third‑party and regulatory relationships.

The role emphasizes collaboration with Infrastructure, Platform, Engineering, Product, and Operations to ensure security is built in from the start and is auditable across multiple jurisdictions.

Qualifications

• Expertise in ISO 27001 and information security management systems.
• Proven ability to translate regulatory requirements into concrete controls.
• Strong risk assessment, workshop facilitation, and vendor risk management.

Responsabilités

• Own ISO 27001 ISMS scope, SoA, audits, and management reviews.
• Translate regulatory requirements into security controls and gaps.
• Lead security risk cartography and coordinate with risk teams.

Connaissances

ISO 27001

Regulatory compliance

Risk management

GRC tooling

Cloud governance

Python scripting

Stakeholder mgmt

Audit coordination

Outils

ServiceNow GRC

Archer

CISO Assistant

Description du poste

Alan SA is seeking a Governance, Risk & Compliance professional to own the ISO 27001 ISMS, drive internal audits, and coordinate with Legal, Internal Audit, and Risk teams. You will translate complex regulations into practical security controls and manage third‑party and regulatory relationships.

The role emphasizes collaboration with Infrastructure, Platform, Engineering, Product, and Operations to ensure security is built in from the start and is auditable across multiple jurisdictions.