Alan - Security Engineer Junior - GRC

Remote - France+ Equity1w ago

Remote Junior EMEA Healthcare Security Engineer Reporting Risk Management Governance

Requirements

• You want to do the work yourself and grow with it: a permanent, hands-on role where you build things for the long run. • 2+ years in security, GRC or compliance (an audit background is fine if you want to move into building). • You've played a key part in a certification or audit cycle (ISO 27001, HDS, SOC 2 or similar). • You're curious about how things work technically, and you've automated at least one manual task (a script, a tool, an AI workflow). • You're fluent in French and English, and comfortable presenting in both. • You learn fast, ask for feedback, and go into the details when it matters. • Location: You must be legally eligible to work from France, Belgium or Spain. • Remote work: We offer remote work flexibility. • 🎯 IMPORTANT NOTE: WE HIRE PEOPLE, NOT ROLES. • If you're excited about this opportunity but don't check every box, we'd love to hear from you. Everyone, no matter how underrepresented, should feel free to apply, as it can only bring learnings or success. • 🔖 Check out our About Alan https://alan.com/about and Career https://alan.com/careers pages, as well as our Medium https://medium.com/alan, blog https://blog.alan.com/ and Glassdoor page https://www.glassdoor.com/Overview/Working-at-Alan-EI_IE1696043.11,15.htm for more info.

Responsibilities

• Keep our certifications on track. You run the day-to-day of the ISO 27001 and HDS audit cycles: collecting evidence, preparing internal audits, and following up on corrective actions until they're closed. • Turn regulations into practical actions. With Legal and the DPO, you help translate requirements like DORA, HDS, and GDPR into clear tasks for the teams, and track that they get done. • Learn the health sector rules. You build your knowledge of health-specific frameworks (ANS, HDS) and help apply them to how we handle health data. • Contribute to risk management. You help build and update our risk mapping, including AI risks, and follow up on the treatment plans with the teams who own them. • Support the teams who own the controls. You keep the controls framework up to date, answer teams' questions, and help explain security clearly to every stakeholder, from engineers to managers. • Support incident governance. You help classify and document incidents, keep Business continuity and Disaster recovery plans up to date, and prepare inputs for DORA incident reports. • Automate what slows us down. You spot repetitive compliance tasks and automate them with scripts, tools or AI. • 🏗️ WHAT YOU'LL HELP BUILD • One compliance backbone: A single control system for several regulators in several countries, so Alan can scale without rebuilding compliance each time. • An automated evidence engine: evidence collected straight from engineering systems with scripts and AI, so audits run continuously instead of as a quarterly rush. • You'll work closely with Legal, the DPO, Internal Audit and Risk, and day to day with engineering and operations teams.