Security & Compliance Engineer — Remote, ISO 27001 & SOC 2

BuyCo; Marseille; Remote; EUR 52.000 - 64.000; Vollzeit

Benefits dieser Stelle

Swile meal vouchers

SideCare health insurance

50% transport reimbursement

Mobility bonus

Profit-sharing bonus

Holiday bonus

Choice of equipment: Lenovo or Mac

RTT days

Zusammenfassung

BuyCo is seeking a Security & Compliance Engineer to strengthen security and governance across its SaaS platform. The role is a 50/50 split between security and compliance, with a stronger focus on security. You will work with the team to secure infrastructure and drive remediation with engineering.

You will maintain ISO 27001 and SOC 2 with Drata, handle GDPR across regions, and promote a security culture throughout the company. Remote work is fully possible; offices are in Paris and Marseille.

Qualifikationen

• Solid experience in cybersecurity and can work autonomously on security topics.
• Fluent in English and French, comfortable with vendors and customers in English.
• Strong tech background: understand infrastructure and software engineering; can talk with developers.
• Hands-on experience with public Cloud (AWS) and Kubernetes.
• Experience with certification processes (ISO 27001, SOC 2) or equivalents.
• Ability to prioritize based on risk; nothing is infallible; focus on what matters.
• Good teacher who can explain security topics in simple words and bring teams on board.
• Curiosity about AI and its security challenges.

Aufgaben

• Secure the BuyCo platform by applying best practices across our infra (AWS, Azure, data tools, Kubernetes).
• Act as pentest referent, work with pentesters, drive remediation with engineering teams.
• Prioritize security topics based on risks; ensure main risks are covered.
• Spread a strong security culture; explain decisions in simple terms and get teams on board.
• Security operations: monitor, triage alerts, create tickets; improve tooling over time; manage access across the company.
• Governance: maintain ISO 27001 and SOC 2 with Drata; update security policies and processes; prepare internal audits.
• Handle GDPR topics and EU AI Act readiness; respond to customer security questionnaires.
• Your path: learn platform, build security roadmap, then show impact and governance within 1 year.

Kenntnisse

Cybersecurity

English & French

Infrastructure fundamentals

Cloud security (AWS)

Kubernetes

Risk-based prioritization

Security coaching

Curiosity about AI security

Tools

AWS

Kubernetes

Drata

Wiz

Keycloak

Jobbeschreibung

BuyCo is seeking a Security & Compliance Engineer to strengthen security and governance across its SaaS platform. The role is a 50/50 split between security and compliance, with a stronger focus on security. You will work with the team to secure infrastructure and drive remediation with engineering.

You will maintain ISO 27001 and SOC 2 with Drata, handle GDPR across regions, and promote a security culture throughout the company. Remote work is fully possible; offices are in Paris and Marseille.