Security Risk Management Analyst

Ingenico; Paris; Sur place; EUR 70 000 - 90 000; Plein temps

Résumé du poste

Ingenico is a global leader in payments acceptance solutions. We are seeking a security professional to support audits, risk assessments, and assurance activities across the organization.

The role involves coordinating audits, evaluating supplier security, and maintaining documentation of security controls. You will collaborate with Procurement, Legal, and business stakeholders to embed security requirements throughout the vendor lifecycle and contribute to governance reporting.

Qualifications

• Experience in information security, cyber security, risk management, GRC, compliance or audit.
• Solid understanding of ISO 27001, NIST, SOC 2 or CIS Controls.
• Experience supporting audits, risk assessments, supplier reviews, or assurance activities.
• Familiarity with risk management methodologies and GRC platforms.
• Relevant security certifications are advantageous.

Responsabilités

• Coordinate internal and external security audits (ISO 27001, SOC 2) and track findings.
• Maintain evidence repositories and support assurance reporting.
• Develop and improve security policies, standards, and controls.
• Perform supplier security due diligence and risk assessments.
• Coordinate site reviews and monitor physical security controls.
• Liaise with Security Operations and MSP to translate findings into risk actions.

Connaissances

Information Security

Cyber Security

Risk Management

GRC

Compliance

Audit

Outils

GRC platforms

Audit tools

Description du poste

Ingenico is the global leader in payments acceptance solutions. As the trusted technology partner for merchants, banks, acquirers, ISVs, payment aggregators and fintech customers our world‑class terminals, solutions and services enable the global ecosystem of payments acceptance. With 40 years of experience, innovation is integral to Ingenico’s approach and culture, inspiring our large and diverse community of experts who anticipate and help shape the evolution of commerce worldwide. At Ingenico, trust and sustainability are at the heart of everything we do.

Responsabilities:

Audit & Assurance

• Support the coordination of internal and external security audits (ISO 27001, SOC 2, regulatory and internal audits).
• Track audit findings and remediation plans to ensure timely closure.
• Maintain evidence repositories and support assurance reporting.
• Contribute to the development and continuous improvement of security policies, standards, and controls.

Supplier Security & Third-Party Risk

• Conduct security due diligence and risk assessments for suppliers and third parties.
• Review security documentation, certifications, and assurance reports.
• Support the management of supplier security risks throughout the vendor lifecycle.
• Partner with Procurement, Legal, and business stakeholders to ensure security requirements are appropriately embedded.

Physical Security & Assurance

• Support the assessment of physical security controls across offices and facilities.
• Coordinate site reviews, security audits, and compliance activities.
• Monitor and report on physical security risks, incidents, and improvement opportunities.
• Maintain documentation related to access management and physical security controls.

Security Risk Management

• Support the operation of the security risk management framework.
• Identify, assess, and monitor security risks across technology, suppliers, and physical environments.
• Maintain risk registers, controls, issues, and remediation activities within GRC tools.
• Facilitate risk assessments and contribute to governance and leadership reporting.

Collaboration with Security Operations

• Act as a liaison between the Security Organisation and the Managed Security Service Provider.
• Review operational security outputs, including incidents, vulnerabilities, and threat intelligence reports.
• Ensure security findings are translated into actionable risk management and assurance activities.

What You’ll Bring

Technical Experience

• Experience in Information Security, Cyber Security, Risk Management, GRC, Compliance, or Audit.
• Good understanding of security frameworks such as ISO 27001, NIST, SOC 2, or CIS Controls.
• Experience supporting audits, risk assessments, supplier reviews, or assurance activities.
• Familiarity with risk management methodologies and GRC platforms.
• Relevant security certifications are advantageous.

Key Soft Skills

• Strong stakeholder management and relationship-building capabilities.
• Excellent communication skills with the ability to engage technical and non-technical audiences.
• Analytical mindset with strong attention to detail.
• Proactive, curious, and solutions-oriented approach.
• Ability to challenge constructively and influence decision-making.
• Well-organised, adaptable, and capable of managing multiple priorities in a dynamic environment.

As part of our values, we embrace diversity and inclusion at Ingenico. We are an equal opportunity employer and do not discriminate on the basis of an individual's race, national origin, color, gender, gender identity, gender expression, sexual orientation, religion, age, disability, marital status or any other protected characteristic under applicable law, whether actual or perceived.

Ingenico welcomes and encourages applications from people with disabilities. Accommodations are available on request for candidates taking part in all aspects of the selection process.

We want to adapt our processes and create a safe work environment that welcomes everyone.

To learn more about what it's like working inside Ingenico, follow us on LinkedIn