Senior GRC Security Engineer - ISO 27001 & SOC 2

DataDome; Paris; Hybride; EUR 75 000 - 110 000; Plein temps

Avantages offerts par ce poste

Remote/hybrid/in-office options

Office near Opera Garnier

Kenko health benefits

€100 leisure allowance, annual

Bike to office allowance €200

Résumé du poste

DataDome seeks a Senior GRC Security Engineer to scale governance, risk and compliance for a security‑critical SaaS product. You will own ISO 27001, SOC 2 Type II programs and build automation to support audits across the company.

You will partner with Legal, HR, Finance and Ops, translate controls into practical security practices, and drive improvements through hands‑on risk assessments and third‑party reviews in a fast‑growing environment.

Qualifications

• ISO 27001 program leadership and maintenance
• SOC 2 Type II program management and evidence handling
• Experience turning compliance into practical security controls
• Structured risk assessments and remediation planning
• Stakeholder collaboration across Legal, HR, Finance and Operations
• Fluent written and spoken English and French

Responsabilités

• Lead the ISO 27001 program, drive control maturity, evidence collection and audit prep.
• Maintain SOC 2 Type II program, ensure controls and follow-ups stay on track.
• Manage third‑party risk reviews and ensure controls across tools and processes.
• Lead security awareness initiatives and partner with business teams on security topics during sales cycles.

Description du poste

DataDome seeks a Senior GRC Security Engineer to scale governance, risk and compliance for a security‑critical SaaS product. You will own ISO 27001, SOC 2 Type II programs and build automation to support audits across the company.

You will partner with Legal, HR, Finance and Ops, translate controls into practical security practices, and drive improvements through hands‑on risk assessments and third‑party reviews in a fast‑growing environment.