Senior GRC & Security Lead

Alan; United States; Remote; USD 100,000 - 150,000; Full time

Benefits offered by this job

Remote work flexibility

Permanent contract

Job summary

Alan is seeking a senior GRC security professional to own governance and risk across certifications (ISO 27001, HDS) and future standards. You will set direction, map risks, and guide engineering and Legal through regulatory requirements.

This hands-on role includes incident governance, regulatory reporting, and mentoring a junior GRC engineer. Location flexibility with remote options and a permanent contract.

Qualifications

• 6+ years in security with real GRC ownership.
• Experience in certified or strongly regulated environments (ISO 27001, HDS, SOC 2, or health/insurance/finance).
• Ability to explain framework requirements to business teams and auditors.

Responsibilities

• Own the full certification cycle (ISO 27001, HDS, and future standards).
• Define controls framework and standards; partner with engineering to implement controls.
• Manage incident governance, business continuity, and regulatory incident reporting.
• Collaborate with Legal, DPO, Internal Audit, Risk, and Engineering.

Skills

GRC ownership

ISO 27001

HDS

Regulatory compliance

French & English bilingual

Job description

Alan is seeking a senior GRC security professional to own governance and risk across certifications (ISO 27001, HDS) and future standards. You will set direction, map risks, and guide engineering and Legal through regulatory requirements.

This hands-on role includes incident governance, regulatory reporting, and mentoring a junior GRC engineer. Location flexibility with remote options and a permanent contract.