Alan is looking for a Security Lead to lead its highly technical security team operating across more than 10 countries in a regulated health insurance environment. The role spans four core areas: leading and growing the team, owning security in the AI era, scaling security across countries, and building Alan's security strategy. The position requires legal eligibility to work from France and targets level F+ on Alan's level grid.
Responsibilities
- ▹Lead and grow the security team: coach, structure, and elevate a team of security experts
- ▹Own security in the AI era, defining Alan's posture on AI-driven threats and building frameworks for shipping AI features safely
- ▹Scale security across 10+ countries: own the ISMS and ISO 27001 certification programme, navigating DORA, HDS, RGPD, NIS2, and PGSSI-S
- ▹Build and evolve Alan's security strategy, positioning security as a long-term business asset and trust-builder
- ▹Align Legal, DPO, Risk, Engineering, and Product on security requirements
- ▹Translate regulatory requirements into technical controls without creating bottlenecks
Requirements
- ▹Proven experience leading a security (or security-adjacent) team with concrete examples of people development
- ▹At least one full ISO 27001 certification or recertification cycle led end-to-end
- ▹Solid understanding of the regulatory stack: DORA, HDS, RGPD, NIS2, PGSSI-S
- ▹Experience running security risk cartography, ideally with EBIOS RM
- ▹Experience conducting vendor security assessments and defining contractual security requirements
- ▹Clear understanding of AI security: LLM threats, agent risks, AI governance frameworks (OWASP LLM Top 10, MITRE ATLAS, EU AI Act)
- ▹Full professional fluency in English
- ▹Legally eligible to work from France
Nice to have
- ▹French language skills
- ▹Experience in a regulated health sector environment (ANS framework, CERT Santé, HDS)
Soft skills
What we offer
- ▹A stimulating environment and perks
- ▹A strong culture guided by cultural values
- ▹Remote work flexibility, while valuing in-person collaboration
About the company
Alan is a fast-growing health insurer that integrates insurance, prevention, and care into a single user experience, operating across more than 10 countries and handling sensitive health data at scale. It partners with more than 40,000 companies, serves over 1 million members, has reached over €800M in ARR, and employs more than 800 people.