Security Engineer Junior - GRC

Role overview Own practical governance, risk, and compliance work that helps protect sensitive health information across a growing, regulated business. You’ll maintain certification cycles, translate regulatory obligations into actions teams can carry out, and help build automated evidence collection. The role is hands-on, with support from experienced security colleagues and a dedicated coach.

Responsibilities - Coordinate ISO 27001 and HDS audit cycles, including evidence gathering, internal audit preparation, and tracking corrective actions through completion. - Work with Legal and the Data Protection Officer to turn requirements such as DORA, HDS, and GDPR into clear work for teams. - Help assess security and compliance risks, including emerging requirements for AI governance. - Improve compliance processes by automating evidence collection and other manual work with scripts, tools, or AI workflows. - Collaborate with engineering, operations, Legal, Internal Audit, and Risk colleagues to keep controls useful and current.

Requirements - At least two years of experience in security, GRC, or compliance; audit experience can provide a foundation. - Meaningful involvement in a certification or audit cycle, such as ISO 27001, HDS, or SOC 2. - Technical curiosity and experience automating at least one manual process. - Fluent French and English, with confidence presenting in both languages. - A hands-on approach, attention to detail, and willingness to learn and seek feedback.

Benefits and work setup - Permanent employment; candidates must be legally eligible to work from France, Belgium, or Spain. - Remote-work flexibility is available.