GRC Analyst (AI)

Location: Anywhere in France; legally eligible to work from France, Belgium or Spain. Hybrid role with remote work flexibility.

Salary: €70,000–€83,000 annually, plus an equity package.

Company

Healthcare company building a prevention insurance product that integrates insurance, prevention, and care into one user experience.

What you will do

• Run day-to-day ISO 27001 and HDS audit cycles, including evidence collection, internal audits, and corrective-action follow-up.
• Translate DORA, HDS, GDPR, and other regulatory requirements into practical tasks with Legal and the DPO.
• Build knowledge of health-sector frameworks such as ANS and HDS and apply them to health-data handling.
• Maintain risk mapping and treatment plans, including AI risks, and support teams responsible for security controls.
• Support incident classification and documentation, business continuity and disaster recovery planning, and DORA incident-report inputs.
• Automate repetitive compliance activities using scripts, tools, or AI workflows.

Requirements

• 2+ years of experience in security, GRC, or compliance; an audit background is acceptable.
• Key participation in a certification or audit cycle such as ISO 27001, HDS, SOC 2, or a similar framework.
• Technical curiosity and experience automating at least one manual task with a script, tool, or AI workflow.
• Fluent French and English, with the ability to present in both languages.
• Ability to learn quickly, seek feedback, and work through important details.
• Legal eligibility to work from France, Belgium, or Spain.
• Willingness to take on a permanent, hands-on role and build long-term compliance capabilities.

Culture & Benefits

• Work with a security team alongside experienced security engineers and receive a dedicated coach from the first day.
• Take ownership early, with scope expanding as the member base grows.
• Work in an environment where teams own their risks and controls and automation is prioritized.
• Collaborate with Legal, the DPO, Internal Audit, Risk, Infrastructure, Platform, Engineering, and Operations.
• Receive an equity package in addition to the base salary.
• Hybrid work with remote flexibility.