GRC & Product Security Engineer — ISO 27001 & AI Governance

Scality; Paris; On-site; EUR 75,000 - 110,000; Full time

Job summary

Scality is seeking an experienced information security professional to own the company\'s compliance program and coordinate security operations. You will lead our ISO 27001 and ISO 42001 certifications, manage vulnerability follow-up with Engineering, and respond to customer security requests and audits.

The role combines governance, risk and compliance with hands-on security activities while requiring 2–5 years of related experience and a base in France.

Qualifications

• Degree in cybersecurity, information systems or equivalent experience
• 2 to 5 years of experience in information security, GRC or security operations
• Based in France

Responsibilities

• Own Scality's information security compliance program and coordinate the team's security operations
• Lead ISO 27001 and ISO 42001 programs and manage vulnerability follow-up with Engineering
• Answer security questionnaires, audits and customer requests; support CRA and EU AI Act initiatives
• Run governance, risk and control processes; manage documentation, risk assessments and indicators
• Automate and streamline security controls and evidence collection in Jira

Skills

GRC experience

Security operations

ISO 27001

Vulnerability management

Policy writing

Risk assessment

Education

Degree in cybersecurity

Tools

Jira

Confluence

OneLogin SSO

Google Workspace

Slack

Salesforce

Terraform

Packer

SaltStack

Python

Bash

OverSecur

Job description

Scality is seeking an experienced information security professional to own the company\'s compliance program and coordinate security operations. You will lead our ISO 27001 and ISO 42001 certifications, manage vulnerability follow-up with Engineering, and respond to customer security requests and audits.

The role combines governance, risk and compliance with hands-on security activities while requiring 2–5 years of related experience and a base in France.