---
title: 'Security Officer Senior - GRC at Alan'
canonical: 'https://feeny.ai/job/security-officer-senior-grc-alan-in-e2sfkbrw2h78'
type: 'job'
last_seen: '2026-11-10'
---

# Security Officer Senior - GRC at Alan

- **Company:** [Alan](https://feeny.ai/companies/alan)
- **Location:** IN, France
- **Employment:** full-time
- **Work type:** hybrid
- **Posted:** 2026-10-20
- **Last confirmed live:** 2026-11-10
- **Apply:** https://jobs.ashbyhq.com/alan/14e49a11-ee06-48f6-93ef-ff7a49aaf219

## Job description

Health can’t wait. Not for symptoms to get worse. Not for a six‑month appointment. Not for a system to catch up. But that’s exactly how healthcare works today. You wait, until you can’t. Alan exists to end the wait. Health is a universal right, and we believe this right can only become real when it’s coupled with prevention. We need to stop treating health as something we repair and start treating it as something we build, every day. It’s not solely a question of willpower. It’s the healthcare system itself that needs to work for everyone, in a sustainable way. So we are building the new standard in prevention insurance. Alan is the first company that integrates insurance, prevention, and care into a single, acclaimed user experience. We are on an incredible journey to build a global leading company, with a [unique culture](https://alan.com/en/careers). We already partner with 40K+ companies of all sizes, serving more than 1M+ members, and have reached €800M+ in ARR. Prevention as the new norm. That's what we're building with our team of 1000+ people. If it speaks to you: we're hiring across France, Spain, Belgium, and Canada. And beyond. 🛡️ The role Most GRC roles are about keeping auditors happy. This one is about earning our members' trust: every day, they share their diagnoses, their claims and their care with us. You'll own security governance and risk at Alan end to end. That means one clear framework across our certifications and regulations, which the whole company uses to decide what matters most. You set the direction, make the calls on risk, and help every team own its part. We just earned our HDS certification, and there's much more to build as we grow from 1M to many millions of members, across more countries and regulators. That includes how we govern AI, which Alan uses across its products and operations. This is a hands-on senior role. You do the work yourself, mentor the junior GRC engineer we're hiring alongside you, and grow the team over time.

🚀 What you'll do

- Make our security framework a tool for the whole company. You own the full certification cycle (ISO 27001, HDS and those to come), and turn it into something teams use every day to prioritise, not a binder for auditors.
- Bring the security view on regulation. Legal and Risk own the regulatory relationships. You bring the security answer: what the rules mean for how we protect data, and which controls make it work in practice.
- Run risk as an ongoing programme. You map and prioritise security risks, including AI risks, turn them into clear treatment plans, and feed them into company-wide risk decisions with the Risk team.
- Help every team own its risks. You define the controls framework and the standards, while the teams who build and run our systems own the controls. You brief the board and audit committee, and you know which findings need an urgent call and which can wait for the quarterly report.
- Own incident governance. You triage and escalate incidents, own business continuity and disaster recovery, and shape the security side of our regulatory incident reports.
- Be a credible partner to engineering. You work with engineering teams early on new designs and spot control gaps (access, encryption, logging) before they ship. You don't need to be an architect, but you can hold the conversation.

🏗️ What you'll build

- One governance model: clear ownership of risks and controls across teams, so security decisions don't bottleneck on one person.
- A living risk map: prioritised risks that actually drive company and engineering decisions.
- One compliance backbone: a single control system across our countries and regulators, built to scale.
- An automated evidence engine: evidence collected straight from engineering systems, so audits run continuously instead of as a quarterly rush.

You'll work closely with Legal, the Data Protection Officer, Internal Audit and Risk, and day to day with engineering and operations teams.

⭐ What we're looking for

## Your team

You'll join Alan's Corporate team, which brings together our control functions: Risk, Corporate Governance & Internal Control, Legal, Compliance and Security. They share one mission: building what lets Alan operate at scale, safely and responsibly. Within that group, you carry the security governance and risk dimension, working hand in hand with the security engineers who run our infrastructure and platform security, and with a junior GRC engineer we're hiring alongside you. You'll be hands-on every day, building and owning the work yourself. Along the way, you'll mentor the junior engineer and help shape how GRC grows at Alan.

## What you bring

- You want to build and own things yourself, and you enjoy helping someone else grow while you do it.
- 6+ years in security, with real GRC ownership.
- You've run a GRC roadmap in a certified or strongly regulated environment (ISO 27001, HDS, SOC 2, or regulated sectors like health, insurance or finance). You're comfortable working with certification auditors, and you can explain what a framework requires and why it makes sense for business teams.
- You take a stand on risks, and you'd rather close one real risk than write ten policies.
- You're fluent in French and English.

A big plus

- You've driven a certification or audit cycle end to end yourself.
- You've automated compliance work, or you're eager to, and you have a view on where AI can help.
- You've presented risk to senior leaders or a board.
- You've mentored or onboarded someone before.

🌍 How we work Location: You must be legally eligible to work from France, Belgium or Spain. Remote work: We offer remote work flexibility. Contract type: Permanent contract only (no freelancing).

🎯 Important note: we hire people, not roles. If you're excited about this opportunity but don't check every box, we'd love to hear from you. Everyone, no matter how underrepresented, should feel free to apply, as it can only bring learnings or success. Remember, this is just a guide, not a checklist. We'll be thrilled to receive your application!

🔖 Check out our [About Alan](https://alan.com/about) and [Career](https://alan.com/careers) pages, as well as our [Medium](https://medium.com/alan), [blog](https://blog.alan.com/) and [Glassdoor page](https://www.glassdoor.com/Overview/Working-at-Alan-EI_IE1696043.11,15.htm) for more info.

You want to know more about Alan?

🙌 [Perks & Benefits](https://alan.com/en/careers/a/salary-equity): Alaners are provided with a stimulating environment and perks ensuring they are happy, efficient and spend only high-quality time with co-workers. 🤘[A strong culture](https://alan.com/en/about/a/leadership-principles): People joining Alan are often surprised and delighted by our innovative working method. We have a set of cultural values that guide our approach to work

## About Alan

## Company Overview
- **One-liner**: Alan is an integrated digital health partner that combines health insurance, virtual care, and prevention into a single platform.
- **Entity Type**: Private (Series F, raised €140M in 2024)
- **Headquarters**: Paris, France (117 Quai de Valmy, 75010)
- **Founded**: 2016
- **Founders**: Jean-Charles Samuelian-Werve and Charles Gorintin

## Core Business
- Primary industry: Healthcare IT / Health Insurance / Digital Health
- Target customers: B2B (companies of all sizes), B2C (retirees, self-employed), and government entities (ministries, local collectivities)
- Mission or purpose statement: "Empower everyone to live a longer, healthier life" and "make prevention the new norm of care"

## Products & Services
- **Alan Health Insurance**: Full-stack digital health insurance with instant reimbursements, smart risk management, and transparent pricing. Covers individuals and groups.
- **Alan Clinic**: Virtual clinic offering AI-powered medical assistant (95%+ good/excellent feedback from doctors), 24/7 clinician chats and video consults, and personalised prevention journeys for mental health, back pain, sleep, nutrition, etc.
- **Prevention & Wellness Platform**: Team and individual challenges, curated wellness store (e.g., integrated optics), and proactive health programmes that drive 30%+ weekly active user engagement.
- **AI Medical Assistant**: Proprietary AI built for faster, fairer healthcare — provides instant answers and powers smart claims processing (50% of reimbursements in under 5 minutes, 90% in under a day).

## Market Standing
- **Valuation**: €4 billion (as of Series F in 2024)
- **Key Metric**: Over €800 million in annualised revenue, serving 1.1 million+ members across France, Belgium, Spain, and Canada
- **Notable Investors/Partners**: Not disclosed in available sources (Series F led by unspecified investors; recognised as part of La French Tech’s Next40 since inception)
- **Growth Signals**: 800+ employees (up from <10 in 2016); expanded to 4 countries; 95% of SMB clients spend less than 2 hours per year managing coverage; 4.9/5 App Store rating

## Competitive Advantages
- **Integrated model**: The only health partner that combines insurance, virtual care, and prevention in one seamless experience — reducing fragmentation.
- **Proprietary AI**: Built specifically for healthcare, achieving doctor-validated accuracy and enabling instant claims and medical chats.
- **Culture of transparency**: Public salary and equity grids, open access to compensation data for all employees, radical transparency in decision-making.
- **Prevention-first approach**: Proactive health journeys and challenges drive member engagement and long-term outcomes.

## Strategic Focus
- Deepen AI integration across care and insurance to improve speed, fairness, and personalisation.
- Expand into new geographies and customer segments (currently France, Belgium, Spain, Canada; targeting more).
- Scale prevention programmes to shift healthcare from reactive to proactive.
- Continue building a "healthy business" culture with distributed ownership, flexibility, and merit-based progression.

## Why Work Here
- **Culture**: "Radically transparent", member-led, kind methodic optimists — with distributed ownership and accountability. Emphasis on mission and excellence.
- **Remote/Hybrid Policy**: Flexible remote within employment country; offices in Paris, Madrid, Barcelona, Ghent, Brussels, plus coworking hubs across France, Belgium, and Spain. Tailored to role and team needs.
- **Compensation**: Above-market base salary (public grids, no negotiation), equity grants for all Alaners (hiring, refresher, promotion), annual salary reviews and boosters.
- **Diversity & Inclusion**: 48% women (21% in tech/engineering), 94/100 equality index (France), accessible workplaces, zero-tolerance for discrimination.
- **Perks**: Full Alan health coverage for employees, flexible working, transparent career paths, and a strong sense of belonging in a mission-driven environment.

## Sources
1. [alan.com](https://alan.com/en)
2. [alan.com/careers](https://alan.com/en/careers)
3. [alan.com/everyday-life](https://alan.com/en/careers/a/everyday-life)
4. [alan.com/compensation](https://alan.com/en/careers/a/salary-equity)
5. [jobs.ashbyhq.com/alan](https://jobs.ashbyhq.com/alan)

## Other roles at Alan

- [Assistant(e) social(e)](https://feeny.ai/job/assistant-e-social-e-alan-paris-hjwnz16g7q39) — Paris, France
- [Marketing Operations](https://feeny.ai/job/marketing-operations-alan-paris-e8mm1p0y0j22) — Paris, France
- [Senior Revenue Ops](https://feeny.ai/job/senior-revenue-ops-alan-paris-tbv6kchvf1fs) — Paris, France / Madrid, Spain / Barcelona, Spain / Bruxelles, Belgium
- [Senior Revenue Ops](https://feeny.ai/job/senior-revenue-ops-alan-paris-eg0qf8jwh3zb) — Paris, France
- [Psychologue du travail](https://feeny.ai/job/psychologue-du-travail-alan-paris-hf0xkefem3aj) — Paris, France
- [Design Ops](https://feeny.ai/job/design-ops-alan-paris-t8098pp2q0vf) — Paris, France
- [Enterprise Sales Lead (French market)](https://feeny.ai/job/enterprise-sales-lead-french-market-alan-paris-27r9x762qa1x) — Paris, France
- [Care Expert - Belgium 🇧🇪](https://feeny.ai/job/care-expert-belgium-alan-in-191bndmp29k5) — IN, Belgium
- [Bilingual Customer Experience Specialist - Canada 🇨🇦](https://feeny.ai/job/bilingual-customer-experience-specialist-canada-alan-toronto-j0vrapyjg1ks) — Toronto, Canada
- [Spécialiste Expérience Client Bilingue - Canada 🇨🇦](https://feeny.ai/job/specialiste-experience-client-bilingue-canada-alan-toronto-n0a9pw3dh22t) — Toronto, Canada