{"id":144393,"url":"https://alion.io/job/ivalua-senior-security-analyst-grc","title":"Senior Security Analyst - GRC","company":{"id":52894,"name":"Ivalua","domain":"ivalua.com","url":"https://alion.io/company/ivalua","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":83,"open_postings":10,"ghost_share":0,"stale_share":0.5,"repost_share":0,"time_to_fill_p50_days":93,"computed_at":"2026-11-01T06:10:25Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Massy, France"],"countries":["FR"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":53000,"max_usd":86000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":57},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"NIST 800-53","optional":false},{"name":"NIST CSF","optional":false},{"name":"OWASP","optional":false},{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false},{"name":"TCP/IP","optional":true}],"status":"live","first_seen_at":"2025-08-14T12:46:44Z","employer_posted_date":"2026-10-09","last_verified_at":"2026-11-01T07:14:28Z","board_verified":true,"closed_at":null,"days_open":443,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":443},"description":"Senior Security Analyst - GRC \n(Massy - France)\nFounded in 2000, Ivalua is a leading global provider of cloud-based procurement solutions.\nCOMPANY OVERVIEW\nAt Ivalua we are a global community of exceptional professionals, who believe that digital transformation revolutionizes supply chain sustainability and resiliency to unlock the power of supplier collaboration. We achieve this through our leading cloud-based spend management platform that empowers hundreds of the world's most admired brands to effectively manage all categories of spend and all suppliers to increase profitability, improve ESG (environmental, social, and corporate governance) performance, lower risk, and improve productivity. Driven by our passions and fueled by our shared ambitions, we empower and challenge each other to create meaningful experiences for our colleagues, customers, partners, and communities. \nLearn more atwww.ivalua.com. Follow us onLinkedIn \nTHE OPPORTUNITY\nCONTEXT:\nYou will be part of the InfoSec team with a mission to build, maintain, and continuously improve our Information Security program, providing peace of mind and assurance of protection and safety to our customers. Our team is hands-on, with a strong problem-solving mindset, capable of thinking holistically about implementation and providing solutions to address our customers' long-term challenges. We work hard and play hard, enjoying various indoor and outdoor activities organized by the company, allowing you to focus, collaborate, and unleash your creativity.\nROLE: \nWe are looking for a Senior Security Analyst to join our InfoSec team. This role will help drive various GRC activities which include supporting prospect and customer security questions, maintaining security policies, supporting security audits and assessments and driving new security certifications/compliance initiatives. \nWHAT YOU WILL DO WITH US \nLead and support compliance initiatives across global and regional frameworks including SOC 1/SOC 2, ISO 27001, IRAP, PCI-DSS, SecNumCloud, Cyber Essentials Plus (CE+), BSI C5, NIST 800-53\nEvaluate technical controls across the technology stack, including all layers of the TCP/IP model (e.g. network segmentation, firewall rulesets, TLS/SSL configuration, IDS/IPS, access controls, application security, encryption in transit/at rest, cloud security configurations), and translate security requirements into actionable guidance for engineering and infrastructure teams.\nDrive and manage customer security audits, security questionnaires, and contract reviews with a primary focus on the EMEA region. Participate in the negotiation and review of French contracts to ensure alignment with security and compliance obligations.\nAttend prospect and customer meetings and effectively present Ivalua’s security architecture and control information to them. \nLead or support internal and third party security risk management processes, including risk identification, analysis, scoring, treatment planning, and ongoing monitoring. \nSupport continuous compliance monitoring activities using manual and automation and GRC tooling to maintain control effectiveness, generate evidence, and ensure audit readiness.\nOwn execution and coordination of key security and availability controls such as Business Impact Analysis (BIA), Disaster Recovery testing, security incident response exercises, access reviews, etc. \nYOUR PROFILE\nIf you have the below experience and strengths this role could be for you:\nSkills and Experience:\nAt least 4 years of experience as Security Analyst GRC \nStrong working knowledge of security, risk, and compliance frameworks (e.g. NIST CSF & 800-53, ISO 27001, SOC, HITRUST, HIPAA, PCI-DSS, GDPR)\nDirect experience managing audits, self-assessments, or risk assessments against one or more InfoSec frameworks listed above\nExperience performing or supporting security risk management processes (risk assessments, risk registers, business impact analysis)\nFamiliarity with continuous compliance and monitoring platforms\nGood understanding of cloud platforms (Azure, AWS, GCP) and ability to discuss security architecture and control implementation with technical teams\nKnowledge and experience working with IT and security personnel as well as security concepts across all layers of technology (network, infrastructure, web applications, cloud environments)\nKnowledge of risk and security industry literature and knowledge bases (e.g. OWASP, MITRE ATT&CK, NIST 800-39)\nRelevant audit and/or Information Security certifications (e.g. CISSP, CISA, CISM, Azure Cloud Security) are desired\nPrior experience at a Big 4 firm or in a security/compliance function in a cloud/SaaS environment is a plus \nSoft Skills:\nExcellent interpersonal, communication, and organizational skills. Ability to communicate efficiently and professionally in both French and English, including in contractual, regulatory, and technical contexts\nDemonstrated ability to work across geographically distributed teams and with external vendors, auditors, or regulators.\nStrong organizational skills and attention to detail; able to manage multiple competing priorities in a fast-paced environment\nHigh degree of initiative, self-motivation, and ability to work independently with limited supervision\nWHAT HAPPENS NEXT\nIf your application fits this specific position’s needs, our skilled Talent team will reach out to schedule an initial screening call. Get one step closer to achieving your goals - apply today! \nOur Talent team will guide you through every step of the interview process - from preparation to completion. They're here to support you! \nOur recruitment process is designed to assess your competencies through a series of personalized interviews with internal stakeholders relevant to the role. \nInterviews will be conducted virtually via video or on-site with face-to-face meetings.\nLIFE AT IVALUA\nHybrid working model (3 days in the office per week)\nWe're a team dedicated to pushing the boundaries of product innovation and technology\nSustainable Growth, Privately Held\nA stable and cash-flow positive Company since 10 years\nSnacks and weekly lunches in the office\nFeel empowered to pursue your goals with improved team collaboration and increased creativity/productivity\nUnlock and unleash your full professional potential with our exceptional training and career development program\nJoin a dynamic and international team of top-notch professionals who are experts in their respective fields\nCollaborate with like-minded individuals who are deeply passionate and highly motivated about their work\nExperience a truly diverse and inclusive work environment where your unique contributions are highly valued\nRegular social events, competitive outings, team running events, and musical activities\nComparably recognized Ivalua for the following (https://www.comparably.com/companies/ivalua): \nPowered by People - Powered by You!\nUnited by our values we embrace diversity and equity in the broadest possible sense to create an inclusive workplace. To help our customers make supply chains more efficient, sustainable and resilient, we rely on a global team with a variety of backgrounds, skills and views. We believe in equal opportunity and in diversity as a driver of innovation that cultivates a spirit of inclusiveness, creates a productive and fun place to work, and provides fulfilling career opportunities for all Ivaluans.https://www.linkedin.com/company/ivalua/about/\nExperience life at Ivalua - check out our captivatingvideo ! Gain insight into our unique company culture and get a glimpse of what it's like to work with us.","description_format":"text","description_chars":7618,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"French","level":"All levels","optional":false}]},"benefits":["Equity","Hybrid work"],"hiring_locations":[{"name":"France","iso":"FR","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Procurement & Spend Management"],"lifecycle":[{"event":"open","at":"2025-08-14T12:46:44Z"}],"visa":[],"liveness":{"score":8,"band":"cold","label":"Long shot","p_open":1,"p_active":0.272,"p_room":0.28,"age_days":443,"expected_fill_days":93,"reasons":["conf:2","stale_co","velocity","win:tail","crowd:"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/ivalua-senior-security-analyst-grc","json_url":"https://alion.io/job/ivalua-senior-security-analyst-grc.json","meta":{"generated_at":"2026-11-01T08:21:53Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13096,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":52894},"rest":"https://alion.io/mcp/rest/get_company?id=52894"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fivalua-senior-security-analyst-grc"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fivalua-senior-security-analyst-grc"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fivalua-senior-security-analyst-grc"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ivalua-senior-security-analyst-grc\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fivalua-senior-security-analyst-grc"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":144393}},{"tool":"search_jobs","arguments":{"company":"ivalua.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":144393},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}