Remote ISO 27001 & GRC Lead

Alan; Montpellier; Hybride; EUR 90 000 - 140 000; Plein temps

Résumé du poste

Alan is seeking a governance, risk & compliance leader to own the ISO 27001 ISMS, translate regulatory requirements into controls, and run risk as an ongoing programme. You will work across Security, Legal, Engineering, and Operations to embed controls in building blocks and manage audits with certification bodies.

Gain board exposure, coordinate with multiple regulators, and shape Alan’s security culture while guiding health data handling in regulated markets.

Qualifications

• Strong knowledge of ISO 27001 and risk management methodologies.
• Experience translating regulatory requirements (DORA, NIS2, AI Act) into controls.
• Ability to design scalable governance frameworks and run audit programs.
• Comfort with security in health data and multi‑country compliance

Responsabilités

• Own ISO 27001 ISMS scope, SoA, internal audits, and management reviews.
• Lead certification or recertification cycles with rigor.
• Run risk management as a programme using EBIOS RM.
• Embed security requirements in Infrastructure and Engineering work.
• Manage vendor security assessments and third‑party risk.
• Oversee incident governance and DORA reporting support.

Connaissances

ISO 27001 governance

Regulatory compliance

Risk management

GRC tooling

Python scripting

Vendor risk

Cloud governance

Security architecture review

Outils

ServiceNow GRC

Archer

CSPM tooling

GRC automation

Description du poste

Alan is seeking a governance, risk & compliance leader to own the ISO 27001 ISMS, translate regulatory requirements into controls, and run risk as an ongoing programme. You will work across Security, Legal, Engineering, and Operations to embed controls in building blocks and manage audits with certification bodies.

Gain board exposure, coordinate with multiple regulators, and shape Alan’s security culture while guiding health data handling in regulated markets.