Security Engineer Junior - GRC

The role

You will run compliance and risk work across ISO 27001, HDS and DORA. You will automate compliance tasks and help manage risks including AI risks.

What you will do

• Run day-to-day ISO 27001 and HDS audit cycles
• Collect evidence and prepare internal audits
• Follow up on corrective actions
• Translate requirements like DORA, HDS, and GDPR into tasks for teams
• Build knowledge of health-specific frameworks
• Build and update risk mapping including AI risks
• Support teams who own the controls
• Classify and document incidents
• Keep Business continuity and Disaster recovery plans up to date
• Automate repetitive compliance tasks with scripts, tools or AI

Required qualifications

• 2+ years in security, GRC or compliance
• Played a key part in a certification or audit cycle (ISO 27001, HDS, SOC 2 or similar)
• Curious about how things work technically
• Automated at least one manual task (a script, a tool, an AI workflow)
• Fluent in French and English
• Comfortable presenting in French and English
• Legally eligible to work from France, Belgium or Spain

Nice to have

• Audit background

About the company

Alan is a company building a new standard in prevention insurance by integrating insurance, prevention, and care. They serve more than 1M+ members and have reached €800M+ in ARR.