Security & Legal Specialist - Customer Care

Portage Ventures GP Inc.; Indiana (PA); Hybrid; USD 90,000 - 150,000; Full time

Benefits offered by this job

Equity package

Hybrid office in Canada HQ

Lunch allowance

Coffee and snacks

Equipment provided

6 weeks vacation

Premium health insurance

Monthly transport pass

4% 4-year savings plan match

Learning & training budget

Extended parental leave

Job summary

Alan is seeking a Care Legal & Security Specialist to own regulatory, legal, and security topics end-to-end. You will handle complex cases, improve processes, scale solutions across countries, and collaborate closely with Legal, DPO, Care Ops, and Corporate teams.

In this role you will manage operational runs, design scalable workflows, translate processes for adoption in other markets, and mentor Care experts while shaping roadmaps within regulatory constraints.

Qualifications

• 1–2 years in GDPR/privacy operations, legal complaints handling in a regulated sector, or compliance operations in fintech/insurtech/health.
• Strong communication skills; ability to adapt to different audiences and secure buy-in from agents/managers.
• Identify simplification opportunities and translate them into projects; collaborate with Care Ops and Product.
• Comfort navigating regulatory frameworks (GDPR, CNIL) without being a lawyer; knowledge of escalation and ownership.
• Comfort making judgment calls in ambiguous situations.
• Fluent in French (C1+ written and spoken) and proficient in English for internal collaboration.
• Background in law is a plus; operational rigor and scalable solutions are essential.

Responsibilities

• Operational run: manage complex security incidents, GDPR cases, and legal complaints; draft CNIL notifications; interact with CNIL and other stakeholders; monitor KPIs and identify trends.
• Scalability: design workflows, escalation paths, macros, and help-center content; identify automation opportunities; develop regulatory training materials.
• Globalization: translate processes for adoption in Spain, Belgium, and Canada; coordinate with counterparts to share practices and manage regulatory divergences.
• Mentorship and cross-collaboration: support Care experts in the legal & security taskforce; act as escalation reference; shape roadmaps with stakeholders.

Skills

GDPR privacy operations

Regulatory frameworks

Strong communication

Cross-functional collaboration

Ambiguity judgment

French + English

Legal background a plus

Escalation ownership

Job description

Care Legal & Security Specialist – Role

Alan is a leading European health insurer and technology company focused on prevention. We work across France, Spain, Belgium, and Canada, serving over 1 million members. Our goal is to extend the quality years of life expectancy for everyone.

We are looking for a Care Legal & Security Specialist to own regulatory, legal, and security topics end‑to‑end. This role is not purely legal or purely operational; you will handle complex cases, improve processes, scale solutions across countries, and collaborate closely with Legal, DPO, Care Ops, and Corporate teams.

Responsibilities

1. Operational run: Handle complex security incidents, GDPR cases, and legal complaints escalated from Care agents; draft CNIL notifications within regulatory deadlines; manage interactions with external stakeholders such as CNIL, Insurance Ombudsman, and Signal Conso; own KPI monitoring and reporting; identify trends and raise systemic issues.
2. Scalability: process, tools, and training: Design and improve workflows, escalation paths, macros, and help‑center content for L1/L2 cases; identify automation opportunities; develop training materials and ensure regulatory training completion for Care experts.
3. Globalization: Translate processes, frameworks, and training materials from France for adoption in Spain, Belgium, and Canada; coordinate with counterparts to share best practices and anticipate regulatory divergences.
4. Mentorship and cross‑collaboration: Support Care experts in the legal & security taskforce; act as primary escalation reference; collaborate with Corporate Unit Lead, Care Ops, and product teams to shape roadmaps and translate regulatory constraints into actionable processes.

Qualifications

• At least 1–2 years of experience in GDPR/privacy operations, legal complaints handling in a regulated sector, or compliance operations in fintech, insurtech, or health.
• Strong communication skills with ability to adapt to different audiences; competence to secure buy‑in from agents and managers.
• Ability to identify simplification opportunities and translate them into projects; strong collaboration with Care Ops and Product.
• Comfort navigating regulatory frameworks (GDPR, complaint handling, CNIL) without being a lawyer; knowledge of escalation and ownership.
• Comfort making judgment calls in ambiguous situations.
• Fluent in French (C1+ written and spoken) and proficient in English for internal collaboration.
• Background in law is a plus; operational rigor, strong communication, and appetite to build scalable solutions are essential.

Benefits

• Fair rewards – generous equity package in addition to base salary.
• Hybrid office – use of Canadian HQ for 4 days a week.
• Lunch allowance, coffee, and snacks.
• All equipment (MacBook Air, keyboard, laptop stand, monitor, Bose headphones).
• 6‑week vacation policy and flexible working hours.
• Premium healthcare insurance, 100 % covered by Alan for you and family.
• Monthly transport pass reimbursed.
• Employer matching 4 % for 4‑year savings plan.
• Learning & training budget for books and conferences.
• Extended parental leave.

Important note: we hire people, not roles.

After reading this job description, if you feel you do not meet all requirements but this role matches your current focus or future growth, we encourage you to apply. We welcome applicants from all backgrounds.

Check out our About Alan, Career, and Medium pages for more information.