GRC & Product Security Engineer

Scality; Paris; On-site; EUR 70,000 - 90,000; Full time

Job summary

Scality is seeking a security governance and compliance specialist to own the information security program, coordinate security operations, and drive certifications. You will work with engineering to address vulnerabilities, audits, and customer requests while ensuring compliance with evolving regulations.

The role focuses on governance, risk, and compliance (GRC) with involvement in product security and regulatory alignment.

Qualifications

• Minimum 2–5 years in information security, GRC or security operations.
• Experience handling audits and security questionnaires.
• Knowledge of ISO 27001 and regulatory frameworks is a plus.

Responsibilities

• Oversee Scality's information security compliance program and coordinate security operations.
• Lead certification efforts (ISO 27001, ISO 42001) and vulnerability follow-up with Engineering.
• Address customer security requests and audits; align products with regulations like the EU CRA.

Skills

Information security

GRC

Security operations

Audits & compliance

Education

Degree in cybersecurity or related field

Tools

Jira

Confluence

SBOM tooling

GRC platform (OverSecur)

Job description

Scality is seeking a security governance and compliance specialist to own the information security program, coordinate security operations, and drive certifications. You will work with engineering to address vulnerabilities, audits, and customer requests while ensuring compliance with evolving regulations.

The role focuses on governance, risk, and compliance (GRC) with involvement in product security and regulatory alignment.