Security & Compliance Engineer

GRC Engineer

We're looking for a GRC Engineer to lead Governance, Risk & Compliance across Welcome to the Jungle. You'll drive our SOC 2 certification, run day-to-day security governance (access reviews, audits, controls, vendor reviews, security questionnaires), and navigate regulatory requirements (GDPR, AI Act, SOC2) to accelerate business growth and meet Enterprise customer needs across our France, UK, and US markets. You'll work in collaboration with our Security Squad (Platform Engineering, Corporate IT, Legal) and cross-functional teams, with a pragmatic mindset and an AI-first approach to GRC.

Reporting to: Kévin Le Roy, VP AI Transformation, IT & Security

SOC 2 Certification & Compliance

• Own and drive our SOC2 certification program: gap analysis, control mapping, evidence collection, remediation coordination, and auditor management
• Prepare and coach cross-functional teams for audit readiness through mock audits and training sessions
• Navigate overlapping regulatory requirements and enterprise customer expectations
• Provide security expertise to Legal and DPO on regulatory topics (GDPR, AI Act, etc.)
• Lay the groundwork for future certifications (ISO 27001)

Risk Management & Vendor Security

• Conduct and maintain risk assessments following ISO 27005 methodology
• Own the risk register with quarterly reviews, prioritizing risks by business impact
• Perform SaaS security reviews during procurement and manage third-party risk assessments for critical vendors
• Assess security impact of organizational, technical, or product changes
• Respond to customer security questionnaires and support sales cycles with accurate, timely answers

Security Governance & Controls

• Execute recurring governance activities: monthly control checks, quarterly access reviews (Ploy), periodic internal audits
• Monitor security dashboards and KPIs with Corporate IT and Platform Engineering teams
• Coordinate security incident response and lead post-incident reviews
• Coordinate penetration tests with external providers and track vulnerability remediation with Platform Engineering
• Track and report on security & compliance metrics to leadership

Policy, Awareness & Communication

• Develop and maintain security policies that improve our security posture while minimizing productivity impact
• Maintain and enrich the Security Knowledge Base with up-to-date documentation
• Contribute to Security Committee preparation, facilitate meetings, and drive action items
• Design and deliver security awareness content: onboarding sessions, ongoing trainings (Elba), and internal communications
• Partner with Engineering to continuously improve security in the SDLC and products