Security & GRC Leader for Health Data (Remote)

Alan; Lyon; Hybride; EUR 110 000 - 150 000; Plein temps

Avantages offerts par ce poste

Remote work flexibility

Résumé du poste

Alan is building a secure, compliant platform handling health data for 1M+ members. The role owns governance, risk and compliance in collaboration with Legal, DPO and the broader Risk function, and partners with Infrastructure, Platform, Engineering, Product, and Operations to embed security into everyday decisions.

You will drive ISO 27001, DORA, and regulatory readiness while maturing the risk program and third‑party security posture across multiple jurisdictions.

Qualifications

• Experience leading governance, risk & compliance programmes.
• Ability to translate regulatory requirements into technical controls.
• Proven track record with ISO 27001 and audit cycles.
• Strong collaboration with Legal, DPO, Risk, and Engineering.

Responsabilités

• Own and operate ISO 27001 ISMS and audit programs.
• Lead security regulatory efforts across DORA, NIS2, RGPD.
• Run risk management using structured methodologies (EBIOS RM).
• Define standards for controls and coordinate with Infra, Platform and Engineering.

Connaissances

Governance & risk

ISO 27001 ISMS

Regulatory knowledge

Risk management

GRC tooling

Cloud governance

Vendor risk management

Outils

CISO Assistant

ServiceNow GRC

Archer

Description du poste

Alan is building a secure, compliant platform handling health data for 1M+ members. The role owns governance, risk and compliance in collaboration with Legal, DPO and the broader Risk function, and partners with Infrastructure, Platform, Engineering, Product, and Operations to embed security into everyday decisions.

You will drive ISO 27001, DORA, and regulatory readiness while maturing the risk program and third‑party security posture across multiple jurisdictions.