Security Engineer - GRC

United States Digital Space LLC; France; Hybride; EUR 95 000 - 135 000; Plein temps

Résumé du poste

United States Digital Space LLC seeks a Security Governance lead to own the ISO 27001 ISMS, manage internal audits, and drive risk-based security improvements. You will collaborate with Legal, Internal Audit, and Risk to ensure compliance with DORA, HDS, and ACPR requirements.

The role demands strong governance experience, cross-functional collaboration, and the ability to operate in a regulated environment across multiple jurisdictions.

Qualifications

• Experience leading security governance programs.
• Knowledge of ISO 27001 and related standards.
• Ability to manage internal audits and compliance reviews.

Responsabilités

• Own and operate the ISO 27001 ISMS, including scope, SoA, audit programme, and management reviews.
• Collaborate with Legal, Internal Audit, and Risk to maintain regulatory posture (DORA, HDS, ACPR).
• Drive risk-based decisions and continuous improvement of information security controls.

Connaissances

Governance

ISO 27001

Risk management

Regulatory compliance

Internal audit

Formation

CISSP/CISM/ISO 27001 Lead Implementer

Outils

ISMS frameworks

Description du poste

Health can't wait. Not for symptoms to get worse. Not for a six-month appointment. Not for a system to catch up. But that's exactly how healthcare works today. You wait, until you can't.

the company exists to end the wait.

Health is a universal right, and we believe this right can only become real when it's coupled with prevention. We need to stop treating health as something we repair and start treating it as something we build, every day. It's not solely a question of willpower. It's the healthcare system itself that needs to work for everyone, in a sustainable way.

So we are building the new standard in prevention insurance. the company is the first company that integrates insurance, prevention, and care into a single, acclaimed user experience.

We are on an incredible journey to build a global leading company, with a unique culture. We already partner with 40K+ companies of all sizes, serving more than 1M+ members, and have reached €800M+ in ARR.

Prevention as the new norm. That's what we're building with our team of 800+ people. If it speaks to you: we're hiring across France, Spain, Belgium, and Canada. And beyond.

the company operates at the intersection of health insurance, prevention, and regulated data. The person in this role owns the security governance and risk posture of a company that handles sensitive health data for 1M+ members, operates under DORA and HDS certification requirements, and is regulated by the ACPR. They work in close partnership with Legal, Internal Audit, and the broader Risk function. It's a highly collaborative role.

Your mission

Governance, risk & complianceOwn and operate the ISO 27001 ISMS. You are the accountable owner of the Information Security Management System: scope definition, Statement of Applicability, internal audit programme, and management review. You've led at least one full certification or rec