Security Governance and Risk (Cybersecurity)

Location: Hybrid with remote work flexibility; must be legally eligible to work from France, Belgium or Spain.

Compensation: €83K–€100K base salary, plus equity.

Company

hirify.global builds a prevention insurance platform integrating insurance, prevention and care into a single user experience, serving more than 1M members and partnering with over 40K companies.

What you will do

• Own security governance and risk management end to end across certifications, regulations and company-wide security decisions.
• Own the certification cycle for ISO 27001, HDS and future certifications, turning the framework into a practical tool for teams.
• Interpret regulatory requirements from a security perspective and define controls and standards with Legal, Risk and Compliance.
• Map, prioritise and manage security and AI risks, including treatment plans and integration with company-wide risk decisions.
• Lead incident governance, business continuity, disaster recovery and the security aspects of regulatory incident reporting.
• Partner with engineering on access, encryption, logging and control gaps; brief the board and audit committee; mentor a junior GRC engineer.

Requirements

• 6+ years of experience in security with real GRC ownership.
• Experience running a GRC roadmap in a certified or strongly regulated environment, including ISO 27001, HDS, SOC 2, healthcare, insurance or finance.
• Experience working with certification auditors and explaining framework requirements and their business rationale.
• Ability to take ownership of security risks and prioritise practical risk reduction over excessive policy writing.
• Fluent French and English.
• Legal eligibility to work from France, Belgium or Spain.

Nice to have

• End-to-end ownership of a certification or audit cycle.
• Experience automating compliance work or a clear view of how AI can support compliance.
• Experience presenting risk to senior leaders or a board.
• Experience mentoring or onboarding another person.

Culture & Benefits

• Remote work flexibility within the permitted countries.
• Equity package alongside an above-market base salary.
• Work in a Corporate team spanning Risk, Corporate Governance & Internal Control, Legal, Compliance and Security.
• Collaboration with security engineers responsible for infrastructure and platform security, engineering, operations and control functions.
• Focus on prevention, responsible scaling and building a security framework used across the company.