Security & Compliance Engineer (ISO 27001, GDPR, GRC)

Alan; United States; Remote; USD 73,000 - 107,000; Full time

Benefits offered by this job

Stimulating environment

Strong culture

Job summary

Alan is seeking a hands-on Compliance & Security professional to manage ISO 27001 and HDS audits, translate regulations into practical tasks, and support risk management across engineering and operations.

You’ll collaborate with Legal, the DPO, Internal Audit and Risk teams, automate repetitive tasks, and help build a scalable compliance backbone across multiple regulators and countries.

Qualifications

• 2+ years in security, GRC or compliance (an audit background is fine if you want to move into building).
• You’ve played a key part in a certification or audit cycle (ISO 27001, HDS, SOC 2 or similar).
• You’re curious about how things work technically, and you’ve automated at least one manual task (a script, a tool, an AI workflow).
• You’re fluent in French and English, and comfortable presenting in both.

Responsibilities

• Run day-to-day ISO 27001 and HDS audits, gather evidence, and close corrective actions.
• Translate regulations like DORA, HDS, and GDPR into actionable tasks for teams.
• Build health-sector knowledge (ANS, HDS) and apply it to health data handling.
• Contribute to risk mapping and track AI risks with owners.
• Maintain the controls framework and help explain security to engineers and managers.
• Support incident governance, update business continuity and disaster recovery plans.
• Identify and automate repetitive compliance tasks with scripts or AI.
• Help implement a single compliance backbone for multiple regulators across countries.
• Collaborate with Legal, the DPO, Internal Audit and Risk, and engineering daily.

Skills

Security

GRC

Compliance

Audit

Automation

French-English bilingual

Job description

Alan is seeking a hands-on Compliance & Security professional to manage ISO 27001 and HDS audits, translate regulations into practical tasks, and support risk management across engineering and operations.

You’ll collaborate with Legal, the DPO, Internal Audit and Risk teams, automate repetitive tasks, and help build a scalable compliance backbone across multiple regulators and countries.