Security Governance Associate

Contentsquare; Paris; Hybride; EUR 60 000 - 90 000; Plein temps

Avantages offerts par ce poste

Stock options

Generous paid time-off

Lifestyle allowance

Résumé du poste

Contentsquare is seeking a Security Governance Associate to join the Security Team, reporting to the Security Governance Specialist. The role supports ISOcertifications, audits, risk management and cross-team collaboration in a fast-growing environment.

Work location is Paris or Barcelona with hybrid policies; English fluency is essential, French a plus, and a proactive mindset is valued. The team emphasizes security awareness and strong governance across acquired companies.

Qualifications

• Genuine interest in security, governance, risks and compliance topics.
• Fluent in English (French is a plus).
• Location: Paris or Barcelona.
• Experience delivering risk assessments, security policies, processes and training.

Responsabilités

• Maintain ISO 27001/27701/27017/27018 certifications, HIPAA and SOC 2 reports.
• Assist acquired companies with Contentsquare security policies and practices.
• Participate in internal/external/customer/certification security audits.
• Contribute to risk management activities including internal risk assessments and third-party reviews.
• Deploy/merge security practices with acquired companies.
• Handle governance tasks (management reviews, risk analysis, KPIs, supplier risk).
• Collaborate with other departments to improve security of business processes.
• Promote security awareness through campaigns and initiatives.
• Review security clauses in legal contracts.
• Respond to security incidents and coordinate remediation.
• Perform security assessments and risk analyses on vendors (TPRM).

Connaissances

Security governance

AI security

Project ownership

Interpersonal skills

Client-facing requests

Independent work

Risk assessments

Security policies

Training/mentoring

Formation

Bachelor's and/or Master's degree in Information Systems Management or a related field

Description du poste

Contentsquare is the all-in-one experience intelligence platform designed to be easily used by anyone who cares about digital journeys. With our flexible and scalable platform, organizations quickly get a deep understanding of their customers’ whole online journey.

We are a global leader in the experience analytics space, with a growing presence across 15 offices worldwide. We’re here to stay—and we’re looking for team members who are excited to drive impact and help us scale even further.

Our aim is to create an inclusive workplace where everyone learns and succeeds. Contentsquare has built a community of individuals who are daring, understanding, and deliberate. We invite you to join us in making the complex simpler—for our customers, their customers, and each other.

Important note: Be careful of scammers pretending to be from Contentsquare. We will never ask for money or contact you through random texts. Any communication from our in house Talent Acquisition team will only ever come from our contentsquare.com or @contentsquare-ext.com domain. For more information, visit our careers blog.

Security Governance Associate

Contentsquare is looking for a Security Governance Associate to be a part of the Security Team. As part of the Security Team, you will be reporting directly to the Security Governance Specialist. Contentsquare’s Security Team sits within the global trust team and is responsible for the oversight, guidance and business enablement of security aspects within Contentsquare and its acquired company products, teams and customers.

You will work out of our Paris or Barcelona office. Contentsquare provides a SaaS service and commits to the highest security level for its customers. Contentsquare is ISO 27001,ISO 27701, ISO 27017 and ISO 27018 certified and deployed many security initiatives during the last year (SOC 2 Type 2 report, penetration testing, private bug bounty program, security awareness training for all employees, SIEM, etc.).

What You Will Do

• Participating in maintaining our ISO 27001/27701/27017/27018 certifications, HIPAA and SOC 2 report. As well as any new framework we would go forward with.
• Helping acquired companies integrate with Contentsquare’s security policies and practices
• Taking part in internal, external, customer and certification security audits
• Contributing to periodic risk management activities such as internal risk assessments and third party security reviews
• Deploying/merging our security practices, policies and certification with recently acquired companies
• Handling the security governance tasks (bi-annual management review, risk analysis, monthly KPI, security awareness, supplier risk review)
• Collaborating with other departments to improve the security of business processes (onboarding, offboarding, access management, business continuity, SDLC, incident management, etc.)
• Actively promoting security awareness through the use of structured campaigns and initiatives
• Helping ensure internal security controls are understood and consistently followed
• Responding to prospects/customers on security topics before and during the life of customer contracts
• Reviewing security clauses in legal contracts
• Arrange the schedule of internal and external security scans, penetration testing, code vulnerability testing, etc.
• Continually monitor emerging threats, understanding when a concern becomes a priority, and finding creative ways to mitigate these while achieving business goals
• Respond to security incidents if they occur, working to investigate and remediate the impact swiftly
• As part of Third-Party Risk Management (TPRM), perform security assessments and risk analyses on vendors

What We Are Looking For

• Genuine interest in various security, governance, risks and compliance topics
• Keen interest in AI technologies and AI security, with a desire to stay ahead of industry trends.
• Comfortable taking ownership of projects and showcasing key accomplishments
• Excellent interpersonal skills and a service ethic
• A track record of assisting business functions with technical internal and customer-facing requests that are prioritised appropriately
• Ability to work quickly and independently in a fast-paced scale-up environment
• Experience delivering risk assessments, security policies, processes and procedures, guidance, and training with empathy and understanding for a diverse remote team
• Familiarity with internal/external security assessments and reviews, such as penetration testing, bug bounty programs, and internal vulnerability scans
• A willingness to get stuff done in an enthusiastic, proactive, and resourceful manner that scales
• Be passionate about information security!
• Fluent in English (French is a plus!)

Specific Requirements

• Bachelor's and/or Master's degree in Information Systems Management or a related field.
• Previous professional experience in Cybersecurity or Security GRC.
• Strong project management skills.
• Knowledge of ISO 27001, SOC 1, and SOC 2 frameworks is desirable.
• Demonstrates rigor, autonomy, and a proactive mindset, with the ability to drive initiatives and bring forward new ideas.
• Location: In our Paris (France) or Barcelona (Spain)

Why you should join Contentsquare

We invest in our people through career development, mentorship, social events, philanthropic activities, and competitive benefits. We are always assessing the perks we offer to ensure we’re aligned with the employees' needs.

Here are a few we want to highlight:

• Virtual onboarding, Hackathon, and various opportunities to interact with your team and global colleagues both on and offsite each year
• Work flexibility: hybrid and remote work policies
• Generous paid time-off policy (every location is different)
• Lifestyle allowance
• A Culture Crew in every country we’re based in to coordinate regular activities for employees to get to know each other and bond outside of work
• Every full-time employee receives stock options, allowing them to share in the company’s success
• We have multiple Employee Resource Groups, that offer a safe space for individuals who share common identities, life experiences, or allyship to connect, support one another, and passionately advocate for the issues close to their hearts
• And more benefits tailored to each country

Contentsquare is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to sex, gender identity or expression, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law.

Your personal data is used by Contentsquare for recruitment purposes only. Read our Job Candidate Privacy Notice to find out more about data protection at Contentsquare and your rights. You can exercise your rights by using our dedicated Data Subject Rights Portal here .

Your personal data will be securely stored in our hosting provider’s data center in Oregon (US west). We have implemented appropriate transfer mechanisms under applicable data protection laws.

Contentsquare may use AI-assisted tools to help review and screen applications. All decisions involving hiring are made by human reviewers, and your personal data will be processed in accordance with our Candidate Privacy Policy .

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.