GRC Engineer: Pragmatic Security & Compliance (Remote)

Believe; France; Sur place; EUR 60 000 - 90 000; Plein temps

Avantages offerts par ce poste

Remote working policy

Wellness program and mental health平台

Company restaurant

Résumé du poste

Believe is seeking a Security GRC Engineer to build governance, risk, and compliance in a modern, automation-friendly way. You’ll partner with engineering, product, workplace, auditors and security to turn risk management into usable guardrails, challenging processes that add friction without improving security.

You’ll drive risk assessments, remediation tracking, and compliance-by-code habits, aligning programs with recognized frameworks in a pragmatic manner.

Qualifications

• Experience in GRC / risk / compliance in a tech environment with security, cloud, SaaS, or engineering orgs.
• Ability to write simple, clear policies and translate requirements into engineering‑friendly controls.
• Comfort with ambiguity and agility: iterate, prioritize, and deliver incremental improvements.
• Excellent stakeholder skills: influence without authority and get things done.

Responsabilités

• Run lightweight, continuous risk assessment and threat modeling with teams; translate risk into actionable options.
• Track remediation plans and provide visible reporting.
• Maintain and improve security policies and standards to be short and actionable.
• Support audits and evidence collection with pragmatic alignment to frameworks (e.g., NIST).
• Drive third‑party risk assessments and scalable vendor processes.

Connaissances

GRC / risk / compliance

Security fundamentals

Policy writing

Stakeholder management

Description du poste

Believe is seeking a Security GRC Engineer to build governance, risk, and compliance in a modern, automation-friendly way. You’ll partner with engineering, product, workplace, auditors and security to turn risk management into usable guardrails, challenging processes that add friction without improving security.

You’ll drive risk assessments, remediation tracking, and compliance-by-code habits, aligning programs with recognized frameworks in a pragmatic manner.