Security Risk & Compliance Strategist

Ingenico; Paris; Sur place; EUR 70 000 - 90 000; Plein temps

Résumé du poste

Ingenico is a global leader in payments acceptance solutions. We are seeking a security professional to support audits, risk assessments, and assurance activities across the organization.

The role involves coordinating audits, evaluating supplier security, and maintaining documentation of security controls. You will collaborate with Procurement, Legal, and business stakeholders to embed security requirements throughout the vendor lifecycle and contribute to governance reporting.

Qualifications

• Experience in information security, cyber security, risk management, GRC, compliance or audit.
• Solid understanding of ISO 27001, NIST, SOC 2 or CIS Controls.
• Experience supporting audits, risk assessments, supplier reviews, or assurance activities.
• Familiarity with risk management methodologies and GRC platforms.
• Relevant security certifications are advantageous.

Responsabilités

• Coordinate internal and external security audits (ISO 27001, SOC 2) and track findings.
• Maintain evidence repositories and support assurance reporting.
• Develop and improve security policies, standards, and controls.
• Perform supplier security due diligence and risk assessments.
• Coordinate site reviews and monitor physical security controls.
• Liaise with Security Operations and MSP to translate findings into risk actions.

Connaissances

Information Security

Cyber Security

Risk Management

GRC

Compliance

Audit

Outils

GRC platforms

Audit tools

Description du poste

Ingenico is a global leader in payments acceptance solutions. We are seeking a security professional to support audits, risk assessments, and assurance activities across the organization.

The role involves coordinating audits, evaluating supplier security, and maintaining documentation of security controls. You will collaborate with Procurement, Legal, and business stakeholders to embed security requirements throughout the vendor lifecycle and contribute to governance reporting.