ISO 27001 & GRC Security Analyst

RemoteLeads; France; Sur place; EUR 60 000 - 90 000; Plein temps

Résumé du poste

RemoteLeads is seeking a GRC/Information Security Analyst to maintain ISO 27001 controls, ensuring they stay effective, documented, and evidenced. You will support audits, coordinate corrective actions, and run recurring security activities such as vulnerability reviews, access reviews, and policy refresh cycles across AWS, Google Workspace, Slack, and other platforms.

The role includes evaluating new tools for security risk, helping with AI governance initiatives, and integrating acquired

Qualifications

• 3+ years of experience in GRC, compliance, or information security
• Solid knowledge of ISO 27001 and Annex A controls
• Hands-on with vulnerability management tools and access governance processes
• Experience with AWS security tools and triaging findings
• Exposure to AI tooling to accelerate compliance work
• Ability to explain security topics to engineers and executives
• Familiarity with cloud environments and SaaS administration tools
• Experience mapping requirements across frameworks (HIPAA/HITRUST preferred)

Responsabilités

• Maintain and improve ISO 27001 controls, ensuring they remain effective and documented
• Support audits, surveillance audits, and recertification cycles
• Track corrective actions, nonconformities, and continuous improvement
• Run recurring security activities: vulnerability campaigns, access reviews, risk assessments, and policy reviews
• Triage vulnerability findings from AWS GuardDuty/Inspector and define remediation priorities
• Perform periodic access reviews for critical systems (Google Workspace, AWS, Slack, etc.)
• Review new tools/vendors for security and compliance risks before adoption
• Help harden internal workflows focusing on IAM, MFA, SSO, and data handling
• Support security questionnaires, RFPs, and customer due diligence
• Assist AI governance, SaaS governance, and integration of acquired entities into ISO scope

Connaissances

English communications

Governance & compliance

Risk assessment

Vulnerability management

Access governance

AI tooling for compliance

Outils

Vanta

AWS GuardDuty

AWS Inspector

Google Workspace

Slack

IAM / SSO

Description du poste

RemoteLeads is seeking a GRC/Information Security Analyst to maintain ISO 27001 controls, ensuring they stay effective, documented, and evidenced. You will support audits, coordinate corrective actions, and run recurring security activities such as vulnerability reviews, access reviews, and policy refresh cycles across AWS, Google Workspace, Slack, and other platforms.

The role includes evaluating new tools for security risk, helping with AI governance initiatives, and integrating acquired