Information Security Analyst Ajouter aux favoris

Paris
We are looking for an Information Security Analyst to join our Security & IT team and become the operational backbone of our ISO 27001 program. You will support the day-to-day work that keeps Didomi audit-ready year-round and run recurring security activities across the company.

This role is roughly 80% recurring compliance work: evidence collection, audit preparation, access reviews, vendor reviews, and security questionnaire responses. Leverage is the whole game. We want someone who reaches for automation and AI tooling as a default and who actively pushes back on process that no longer earns its keep, rather than someone who accepts that compliance work has to be slow or manual.

This role reports to the Security Manager.

The responsibilities are as follows:

ISO 27001 program and audit readiness

  • Help maintain and improve our ISO 27001 management system, ensuring controls remain effective, documented, and continuously evidenced.
  • Contribute to internal audits, surveillance audits, and recertification cycles, including the upcoming unified audit covering Didomi and recently acquired business units.
  • Track corrective actions, nonconformities, and continuous improvement initiatives, supporting the security team in driving them to closure.
Security operations and recurring activities

  • Carry out recurring activities on the security calendar in support of the security team, including vulnerability scanning campaigns, quarterly access reviews, risk assessments, business continuity tests, and policy review cycles.
  • Triage vulnerability findings from AWS GuardDuty, Inspector, and other sources, then work with the Security Manager to define remediation priorities and follow them through to closure.
  • Run periodic access reviews across critical systems (Google Workspace, AWS, Slack, JAMF, GitLab, GitHub, and internal applications), surfacing findings to the Security Manager and helping ensure they are remediated.
Cross-functional security support

  • Contribute to the security team's reviews of new tools, vendors, and SaaS applications for security and compliance risks before adoption.
  • Help the security team assess and harden internal workflows, with a particular focus on identity, access management, MFA, SSO, and data handling.
  • Support the security team on security questionnaires, RFPs, and customer due diligence requests.
  • Support the security team on broader initiatives such as AI governance, SaaS governance, and integration of acquired entities into the ISO scope.
Preferred skills & experience

  • 3+ years of experience in a GRC, compliance, or information security analyst role, ideally within a SaaS or technology company.
  • Solid working knowledge of ISO 27001, including Annex A controls, the audit process, and how to operationalize the standard rather than treat it as paperwork.
  • Hands-on experience with vulnerability management tools and access governance processes.
  • Hands-on experience with Vanta, including running ISO 27001 (or comparable) audits end-to-end on the platform.
  • Hands-on experience with the AWS security suite, in particular GuardDuty and Inspector, including triaging findings and proposing remediation priorities.
  • Demonstrated use of AI tooling to accelerate recurring compliance and documentation work. You should be able to walk us through concrete examples of what you have built or automated.
  • A strong bias toward removing process. You actively challenge controls, paperwork, and workflows that no longer earn their keep, and you propose lighter alternatives.
  • Strong written communication in English. You can explain security topics clearly to engineers, executives, and customers alike.
  • A pragmatic mindset: you favor controls that work in practice over controls that only look good on paper.
Nice to have

  • Experience supporting HIPAA or HITRUST programs, and comfort mapping requirements across frameworks.
  • Familiarity with cloud environments (AWS in particular) and with common SaaS administration (Google Workspace, Slack, identity providers).
  • Exposure to security questionnaire platforms and trust center tooling.
Tools you'll work with on a regular basis

  • Compliance and GRC: Vanta
  • Cloud and security monitoring: AWS, AWS GuardDuty, AWS Inspector, AWS Security Hub
  • Identity and access: Google Workspace, SSO and MFA providers
  • Endpoint and device management: JAMF
  • Code and engineering: GitLab, GitHub
  • Collaboration and documentation: Slack, Notion, Google Workspace
  • SaaS governance and vendor review: internal review workflows and questionnaire tooling
Recruitment process

  1. HR Screen with our Talent Acquisition Expert (~15 min, video) | Motivation, fit, logistics, salary
  2. Hiring Manager Interview with our Security & IT Manager (~45 min, video) | ISO 27001 depth, mindset, ownership style
  3. Case Study Presentation with our Security & IT Manager & CTO (~60 min, video)
  4. Final Interview with our CTO (optional) (~30 min, video) | Strategic alignment

€48,000 - €60,000 a year

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
Publié le 2026-08-24

Emplois Recommandés

Business Developer - Editeur de logiciel SaaS - Full Remote - Paris/IDF

Skaelia
Paris

Présentation de la société Skaelia est un cabinet de conseil en recrutement spécialisé dans les secteurs IT, Business et Conseil. Nous accompagnons les candidats dans la recherche de leur prochain…

Voir les Détails
Publié le 2026-04-27

Junior Sales Operations Analyst Ajouter aux favoris

Paris

Following the acquisitions of Addingwell (May 2025) and Sourcepoint (July 2025), the RevOps team is looking for a hands-on analyst to drive the integration of both companies into our tools and process…

Voir les Détails
Publié le 2026-08-08

Consulting - Consultant Confirmé / Senior - Assurance & Santé - CDI - Paris (H/F)

Talan
Paris

Description de la mission Nos missions phares  Reengenering de processus par l’activation de tous les leviers  Accompagnement au changement et transformation managériale  Management de prog…

Voir les Détails
Publié le 2025-11-27

CHARPENTIER BOIS (H/F)

EKORS INTERIM
Paris

Description du poste : Vos principales missions : - Travaux de rénovation énergétique de la toiture, du toit - Rénovation de toiture, - Rénovation de charpente, - Bardage, - Isolation des co…

Voir les Détails
Publié le 2025-07-03

Corporate Banking Analyst (Financial Institutions)

Bank of America Corporation
Paris

Job Title: Corporate Banking Analyst (Financial Institutions) Corporate Title:  Analyst Location:  Paris, France Company Overview: At Bank of America, we are guided by a common purpo…

Voir les Détails
Publié le 2026-08-24

Chargée de mission : ramasses et collectes alimentaires

Les Restos du Coeur
Paris

L’Association Nationale des Restaurants du Cur , reconnue d’utilité publique, a pour objet d’aider et d’apporter une assistance bénévole aux personnes démunies par une aide alimentaire et par tou…

Voir les Détails
Publié le 2026-08-12

Ingénieur(e) de conception de cartes électroniques numériques (H/F)

AIRBUS
Paris

**Job Description:** *Et si VOTRE aventure commençait avec NOUS !* Nous vous proposons de travailler dans une entreprise leader mondial dans son domaine, tournée vers le digital, à la pointe de la…

Voir les Détails
Publié le 2026-06-27

Sensibiliser à l'égalité entre les femmes et les hommes et diffuser une culture de l'égalité

Laboratoire de l'Egalité
Paris

Description du poste En quelques mots... Nous fonctionnons avec des groupes de travail bénévoles sur des thématiques en lien avec l'égalité de genre au travail. Nous recherchons un.e volontaire…

Voir les Détails
Publié le 2025-12-04

Contrôleur de gestion (H/F)

Atlante Srl
Paris

At Atlante we develop EV charging stations to enable the transition towards zero-emission: empowering people to move freely in harmony with the planet. We are building Southern Europe’s largest fast …

Voir les Détails
Publié le 2026-07-30

Développeur en Intelligence Artificielle - Alternance H/F

NEXA Nantes
Paris 1er

Le poste de Développeur en Intelligence Artificielle - Alternance H/F Au sein d'une de notre entreprise partenaire (startup spécialisée en solutions d’intelligence artificielle et data science) et…

Voir les Détails
Publié le 2026-08-09