Security Officer Senior - GRC

About the Position

Security Officer Senior - GRC

Alan is on a mission to revolutionize healthcare by integrating insurance, prevention, and care into a single, acclaimed user experience. We are building the new standard in prevention insurance and are looking for a Security Officer Senior - GRC to join our Corporate team in France.

Responsibilities

• Make our security framework a tool for the whole company. You own the full certification cycle (ISO 27001, HDS and those to come), and turn it into something teams use every day to prioritize, not a binder for auditors.
• Bring the security view on regulation. Legal and Risk own the regulatory relationships. You bring the security answer: what the rules mean for how we protect data, and which controls make it work in practice.
• Run risk as an ongoing programme. You map and prioritize security risks, including AI risks, turn them into clear treatment plans, and feed them into company-wide risk decisions with the Risk team.
• Help every team own its risks. You define the controls framework and the standards, while the teams who build and run our systems own the controls. You brief the board and audit committee, and you know which findings need an urgent call and which can wait for the quarterly report.
• Own incident governance. You triage and escalate incidents, own business continuity and disaster recovery, and shape the security side of our regulatory incident reports.
• Be a credible partner to engineering. You work with engineering teams early on new designs and spot control gaps (access, encryption, logging) before they ship. You don't need to be an architect, but you can hold the conversation.

Requirements

• Your team: You'll join Alan's Corporate team, which brings together our control functions: Risk, Corporate Governance & Internal Control, Legal, Compliance, and Security.
• What you bring:
  • 6+ years in security, with real GRC ownership.
  • Experience running a GRC roadmap in a certified or strongly regulated environment (ISO 27001, HDS, SOC 2, or regulated sectors like health, insurance, or finance).
  • Fluency in French and English.
  • You take a stand on risks, and you'd rather close one real risk than write ten policies.

Nice to Have

• Experience driving a certification or audit cycle end to end yourself.
• Experience automating compliance work, or eagerness to, and a view on where AI can help.
• Experience presenting risk to senior leaders or a board.
• Experience mentoring or onboarding someone before.

We Offer

• Compensation: €83K - €100K per year.
• Equity and Salary: An attractive equity package on top of an above market-average base salary.
• Remote work: Flexibility to work remotely.
• Contract type: Permanent contract only (no freelancing).

About the Company

Alan exists to end the wait in healthcare. We believe that health is a universal right, and we are building the new standard in prevention insurance. We already partner with 40K+ companies of all sizes, serving more than 1M+ members, and have reached €800M+ in ARR.

Application

If you're excited about this opportunity but don't check every box, we'd love to hear from you. Everyone, no matter how underrepresented, should feel free to apply, as it can only bring learnings or success.

🔖 Check out our About Alan and Career pages, as well as our Medium, blog, and Glassdoor page for more info.

🌍 Location: You must be legally eligible to work from France, Belgium, or Spain.