Security GRC Lead — ISO 27001 & DORA (Remote)

Alan; Grenoble; Hybride; EUR 90 000 - 120 000; Plein temps

Avantages offerts par ce poste

Flexible remote work

Résumé du poste

Alan seeks a Governance, Risk & Compliance leader to own ISO 27001 ISMS, translate regulatory requirements into concrete controls, and partner with Engineering to embed security in our platforms.

You will run risk programs, manage audits and vendor assessments, and provide security posture updates to the board across multiple markets, while collaborating with Legal, Risk, and Product teams.

Qualifications

• Experience translating regulatory requirements into technical controls.
• Ability to lead auditable risk programs with governance rigor.
• Strong stakeholder management across Legal, Risk and Engineering.
• Proven track record in ISO 27001 and GRC tooling.
• Excellent communication to board and executives.

Responsabilités

• Own ISO 27001 ISMS scope, SoA, audits, and management reviews.
• Lead regulatory/privacy program alignment (DORA, RGPD, etc.).
• Build risk cartography using EBIOS RM and manage risk workshops.
• Embed security requirements in infrastructure and product builds.
• Oversee third-party security assessments and vendor risk.
• Manage incident governance and DORA reporting.
• Coordinate with certification bodies and internal audit.

Connaissances

ISO 27001 ISMS

Regulatory translation

Risk management

Audit management

Vendor risk

Incident governance

Security architecture review

Outils

Python

ServiceNow GRC

Archer

CSPM

OPA

Description du poste

Alan seeks a Governance, Risk & Compliance leader to own ISO 27001 ISMS, translate regulatory requirements into concrete controls, and partner with Engineering to embed security in our platforms.

You will run risk programs, manage audits and vendor assessments, and provide security posture updates to the board across multiple markets, while collaborating with Legal, Risk, and Product teams.