{"id":2941175,"url":"https://alion.io/job/alan-security-engineer-junior-grc","title":"Security Engineer Junior - GRC","company":{"id":4773,"name":"Alan","domain":"alan.com","url":"https://alion.io/company/alan","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":89,"open_postings":27,"ghost_share":0,"stale_share":0.63,"repost_share":0,"time_to_fill_p50_days":14,"computed_at":"2026-10-21T05:46:15Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["France"],"countries":["FR"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":61000,"max":70000,"currency":"EUR","period":"year","gross":null,"usd_annual":78619},"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"EU AI Act","optional":false},{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-10-20T15:30:25Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-21T19:35:02Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Health can’t wait.\nNot for symptoms to get worse. Not for a six-month appointment. Not for a system to catch up. But that’s exactly how healthcare works today. You wait, until you can’t.\nAlan exists to end the wait.\nHealth is a universal right, and we believe this right can only become real when it’s coupled with prevention. We need to stop treating health as something we repair and start treating it as something we build, every day. It’s not solely a question of willpower. It’s the healthcare system itself that needs to work for everyone, in a sustainable way.\nSo we are building thenew standard in prevention insurance. Alan is the first company that integrates insurance, prevention, and care into a single, acclaimed user experience.\nWe are on an incredible journey to build a global leading company, with aunique culture. We already partner with 40K+ companies of all sizes, serving more than 1M+ members, and have reached €800M+ in ARR.\nPrevention as the new norm. That's what we're building with our team of 1000+ people. If it speaks to you: we're hiring across France, Spain, Belgium, and Canada. And beyond.\nThe role\nMost GRC roles are about keeping auditors happy. This one is about earning our members' trust: every day, they share their diagnoses, their claims and their care with us.\nYou'll join Alan's security team to help run our compliance and risk work across ISO 27001, HDS and DORA, across a growing number of countries and regulators. We just earned our HDS certification, and there's much more to build, including how we govern AI across our products: assessing AI risks, setting the controls, and keeping up with the AI Act.\nYou'll learn alongside experienced security engineers, with a dedicated coach from day one. You'll take on real ownership early, and your scope grows as we scale from 1M to many millions of members. And you'll learn how we work at Alan: teams own their risks and controls, we automate wherever we can, and we focus on real outcomes, not paperwork.\nWhat you'll do\nKeep our certifications on track. You run the day-to-day of the ISO 27001 and HDS audit cycles: collecting evidence, preparing internal audits, and following up on corrective actions until they're closed.\n\nTurn regulations into practical actions. With Legal and the DPO, you help translate requirements like DORA, HDS, and GDPR into clear tasks for the teams, and track that they get done.\n\nLearn the health sector rules. You build your knowledge of health-specific frameworks (ANS, HDS) and help apply them to how we handle health data.\n\nContribute to risk management. You help build and update our risk mapping, including AI risks, and follow up on the treatment plans with the teams who own them.\n\nSupport the teams who own the controls. You keep the controls framework up to date, answer teams' questions, and help explain security clearly to every stakeholder, from engineers to managers.\n\nSupport incident governance. You help classify and document incidents, keep Business continuity and Disaster recovery plans up to date, and prepare inputs for DORA incident reports.\n\nAutomate what slows us down. You spot repetitive compliance tasks and automate them with scripts, tools or AI.\n\nWhat you'll help build\nOne compliance backbone: A single control system for several regulators in several countries, so Alan can scale without rebuilding compliance each time.\n\nAn automated evidence engine: evidence collected straight from engineering systems with scripts and AI, so audits run continuously instead of as a quarterly rush.\n\nYou'll work closely with Legal, the DPO, Internal Audit and Risk, and day to day with engineering and operations teams.\n⭐ What we're looking for\nYou want to do the work yourself and grow with it: a permanent, hands-on role where you build things for the long run.\n\n2+ years in security, GRC or compliance (an audit background is fine if you want to move into building).\n\nYou've played a key part in a certification or audit cycle (ISO 27001, HDS, SOC 2 or similar).\n\nYou're curious about how things work technically, and you've automated at least one manual task (a script, a tool, an AI workflow).\n\nYou're fluent in French and English, and comfortable presenting in both.\n\nYou learn fast, ask for feedback, and go into the details when it matters.\n\nHow we work\nLocation: You must be legally eligible to work from France, Belgium or Spain.\nRemote work: We offer remote work flexibility.\nImportant note: we hire people, not roles.\nIf you're excited about this opportunity but don't check every box, we'd love to hear from you. Everyone, no matter how underrepresented, should feel free to apply, as it can only bring learnings or success.\nCheck out our About Alan and Career pages, as well as our Medium, blog and Glassdoor page for more info.\nYou want to know more about Alan?\nPerks & Benefits: Alaners are provided with a stimulating environment and perks ensuring they are happy, efficient and spend only high-quality time with co-workers.\nA strong culture: People joining Alan are often surprised and delighted by our innovative working method. We have a set of cultural values that guide our approach to work","description_format":"text","description_chars":5161,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"French","level":"Advanced (C1)","optional":false},{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[{"name":"France","iso":"FR","kind":"country"},{"name":"Belgium","iso":"BE","kind":"country"},{"name":"Spain","iso":"ES","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Health Insurance & Benefits","InsurTech"],"lifecycle":[{"event":"open","at":"2026-10-20T17:20:30Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":0,"expected_fill_days":14,"reasons":["conf:1","stale_co","velocity","win:early","comp:junior"],"computed_at":"2026-10-21T05:46:15Z"},"pay":{"stated_usd_annual":78619,"is_top_pay":false},"html_url":"https://alion.io/job/alan-security-engineer-junior-grc","json_url":"https://alion.io/job/alan-security-engineer-junior-grc.json","meta":{"generated_at":"2026-10-21T23:33:53Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":33627,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4773},"rest":"https://alion.io/mcp/rest/get_company?id=4773"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Falan-security-engineer-junior-grc"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Falan-security-engineer-junior-grc"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Falan-security-engineer-junior-grc"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/alan-security-engineer-junior-grc\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Falan-security-engineer-junior-grc"}]}