Security Governance & GRC Lead (Remote)

Alan; Anglet; Hybride; EUR 90 000 - 130 000; Plein temps

Résumé du poste

Alan is seeking a senior Governance, Risk & Compliance leader to own the ISO 27001 ISMS, define its scope, lead internal audits, and manage certification cycles. You will act as the security expert on regulatory matters and translate requirements into concrete controls.

You will run risk programmes using EBIOS RM, embed security across Infrastructure, Platform and Engineering, oversee vendor risk, incident governance, DORA reporting, and liaise with the board to shape Alan’s security culture for

Qualifications

• Experience implementing ISO 27001 ISMS and internal audit programmes.
• Knowledge of regulatory frameworks: DORA, HDS, RGPD, PGSSI-S.
• Ability to run risk programmes using EBIOS RM.
• Ability to coordinate with Infrastructure, Platform and Engineering to embed security requirements.

Responsabilités

• Own and operate the ISO 27001 ISMS, scope definition, SoA, audit programme, and mgmt review.
• Lead risk management with EBIOS RM and facilitate workshops.
• Run audit cycles and coordinate with certification bodies and Internal Audit.
• Manage third-party risk including vendor security assessments and DPAs.
• Translate regulatory needs into technical actions and controls.

Connaissances

Regulatory understanding

Risk management

Security governance

Outils

ISO 27001 ISMS

EBIOS RM

Description du poste

Alan is seeking a senior Governance, Risk & Compliance leader to own the ISO 27001 ISMS, define its scope, lead internal audits, and manage certification cycles. You will act as the security expert on regulatory matters and translate requirements into concrete controls.

You will run risk programmes using EBIOS RM, embed security across Infrastructure, Platform and Engineering, oversee vendor risk, incident governance, DORA reporting, and liaise with the board to shape Alan’s security culture for