Security Lead — Remote-Eligible, ISO/DORA Focus & Growth

Roundtable; Paris; Híbrido; EUR 90 000 - 130 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Employee stock options

Health insurance

Meal card Swile

MacBook provided

Hybrid work model

Office in Paris/Toulouse/Luxembourg

RTT / 25 days off

Resumo da oferta

Roundtable is hiring its first dedicated security professional to own and improve security across our tech stack and operations. You’ll partner with Platform, Engineering, Legal, and Operations to ensure secure practices from code to cloud and devices.

You will drive risk reduction, compliance with ISO 27001, DORA, and GDPR, and build scalable security controls while enabling fast delivery and responsible innovation.

Qualificações

• 6+ years in security across corporate IT, cloud, and product security.
• Experience with ISO 27001, DORA, or GDPR from the technical side.
• Ability to review IAM, secrets management, and IaC in cloud environments (GCP a plus).
• Able to code: scripts or automation; PRs when fixing is fastest.

Responsabilidades

• Own security posture of internal environment: laptops, Google Workspace, SaaS tools, and privileged access.
• Review sensitive PRs and architecture decisions; identify configuration gaps.
• Contribute to secure IaC patterns and software supply chain security.
• Lead security operations: pentests, vulnerability remediation, access reviews, and incident exercises.
• Maintain ISO 27001, DORA, GDPR readiness and evidence for audits.
• Run security awareness, phishing exercises, and onboarding for staff.

Conhecimentos

Security

Cloud security

IAM

Scripting

OSINT

Auditing

English fluency

Ferramentas

Terraform

GitHub Actions

Descrição da oferta de emprego

Roundtable is hiring its first dedicated security professional to own and improve security across our tech stack and operations. You’ll partner with Platform, Engineering, Legal, and Operations to ensure secure practices from code to cloud and devices.

You will drive risk reduction, compliance with ISO 27001, DORA, and GDPR, and build scalable security controls while enabling fast delivery and responsible innovation.