Remote Security & Compliance Engineer

Buyco; Marseille; Remote; EUR 52,000 - 64,000; Full time

Benefits offered by this job

Swile meal vouchers

SideCare health insurance

50% reimbursement of public transport

Sustainable mobility bonus

Profit-sharing bonus

Holiday bonus

Choice of equipment: Lenovo or Mac

6 RTT days per year

2 paid sick child leave days

Job summary

BuyCo is seeking a Security & Compliance Engineer to strengthen platform security and governance as the company scales internationally. The role splits 50/50 between security and compliance, with hands-on security driving the core initiatives.

You will work with our team to maintain certifications, manage risk, and support GDPR and EU AI Act compliance while collaborating with engineers, data teams, and external partners.

Qualifications

• Strong hands-on security expertise and governance experience.
• Experience with public cloud (AWS preferred) and Kubernetes.
• Familiarity with ISO 27001, SOC 2 and security certifications.
• Ability to work with vendors and customers in English.

Responsibilities

• Platform security by applying best practices across AWS, Azure, data tools and Kubernetes.
• Lead security operations, triage alerts, and improve tooling and access control.
• Maintain ISO 27001 and SOC 2 with Drata, update policies and run internal audits.
• Handle GDPR and EU AI Act readiness, respond to customer security questionnaires.
• Collaborate with engineers, data teams and external security partners.

Skills

Security engineering

Cloud security

Compliance & governance

ISO 27001 / SOC 2

Drata

Wiz

Tools

Drata

Wiz

Job description

BuyCo is seeking a Security & Compliance Engineer to strengthen platform security and governance as the company scales internationally. The role splits 50/50 between security and compliance, with hands-on security driving the core initiatives.

You will work with our team to maintain certifications, manage risk, and support GDPR and EU AI Act compliance while collaborating with engineers, data teams, and external partners.