Security Engineer

Lyon - France

Monthly Salary: Not Disclosed

Posted on: 13 hours ago

Vacancies: 1 Vacancy

Job Summary

AboutSpendHQ

SpendHQis a fast-growing and dynamicProcuretechScale-upwith an incredible collaborative company culture. Our team is constantly innovating we invented performance management forprocurementand we are a market leader and innovator in spend analytics. We provide procurement teams with the tools they need to drive value for their organization and we have fun doing it.

TheSpendHQSaaS solution has been on the market for over 10 years. Our clients are recognized market leaders from both mid-size organizations and large multinational corporations. There are20000SpendHQusers across 500 global clients.

It is thanks to each of our employees that we are where we are proudly havemoreover100team membersin 10 countrieswith headquarters inbothAtlanta and we are not stopping taking on newchallengesand we look forward to continuing to grow the company and team.

Where would you fit inthe team

As aSecurityEngineeryoullcontribute to keepingSpendHQscloud environments secure and compliant across daily with Sales Product/Engineering ITHRand Customer teams while reporting to theCTO(USA).

What will your job entail

Developand implementcloud security controls to protect data across our SaaS environments.

Conduct security audits & vulnerability assessments on cloud systems and applications.

Maintain security policies & procedures focused on cloud security and GDPR compliance

Support incident management (including investigation of potential GDPR breaches).

Contribute to sales questionnaires (RFP/RFI/RFQ) on Security & Compliance topics.

Drive regulatory awareness & training helping colleagues adopt securityfirst behaviors.

Collaborate with DevOps/development teams to embed security in the pipeline.

What experience and skills do you need to succeed

Minimum Experience:

35years in information security (internship/alternance counts) with exposure to GDPR cloud security and compliance.
Fluency in English(both written and spoken) as the primary working isrequiredin EMEA context.
In-depth knowledge of data protection laws and regulations particularly GDPR and the ability to design security architecture in compliance with these requirements.

What You Bring To the Table:

Familiarity with AWS/Azure/GCP security features and tooling.

Understanding ofSOC2ISO 27001/NIST concepts

Experience contributing to security awareness programs or internal training.

Prior exposure to sales/security questionnaires (RFP/RFI/RFQ)

Strong analytical mindset rigor autonomy and sense of responsibility.

Ability to assess risks and support incident response

Strong collaboration to drive change and bring peopletogethernatural leadership.

Excellent skills in communication and simplification; strong pedagogy and a supportive guiding approach

Why do people love working atSpendHQ

AtSpendHQweare :

Stronger Together: Everyone playsan important roleatSpendHQ. We deliver more success through shared goals and mutual break down silos andcollaborate.

People Focused: We care about those we work with and those we serve. We strive for strong results but not at the expense of people.

Our Best Every Day: We act with authenticity integritydependabilityand empathy. We are transparent with clients and each other. We foster an environment full of humble fun go-getters who approach every day as an opportunity to be their best.

Customer Obsessed: Our customers are the reason for our success. We work hard to provide solutions that make their lives easier and help them achieve extraordinary things.

Bold in Action: We believe in taking daring moves. We do everything with enthusiasm because we know our work is meaningful.

Whatdo youneed to know

Salarycommensuratewith experience. This is a full-time salaried position with a competitive benefits package:

Performancebonus

Time-saving account (CET)

Remote work policy

Flexible working hours

15 RTT

SwileCard 11

Equity Program

Cooptation bonus

The role reports to ourCTObased positionisbased inLyonour EMEA Headquarter.

We are an equal opportunity employer and value diversity at our company. We welcome applications from all qualified individuals regardless of race ethnicity gender sexual orientation disability age or any other protected status. If youdontmeet every requirement but believe you would be a great fit we encourage you to apply!

Important notice:All legitimateSpendHQrecruiting communications comeonlyfrom email addresses ending in@and relate to roles posted on Experience:

AboutSpendHQSpendHQis a fast-growing and dynamicProcuretechScale-upwith an incredible collaborative company culture. Our team is constantly innovating we invented performance management forprocurementand we are a market leader and innovator in spend analytics. We provide procurement teams with the t...

AboutSpendHQ

Where would you fit inthe team

As aSecurityEngineeryoullcontribute to keepingSpendHQscloud environments secure and compliant across daily with Sales Product/Engineering ITHRand Customer teams while reporting to theCTO(USA).

What will your job entail

Developand implementcloud security controls to protect data across our SaaS environments.

Conduct security audits & vulnerability assessments on cloud systems and applications.

Maintain security policies & procedures focused on cloud security and GDPR compliance

Support incident management (including investigation of potential GDPR breaches).

Contribute to sales questionnaires (RFP/RFI/RFQ) on Security & Compliance topics.

Drive regulatory awareness & training helping colleagues adopt securityfirst behaviors.

Collaborate with DevOps/development teams to embed security in the pipeline.

What experience and skills do you need to succeed

Minimum Experience:

35years in information security (internship/alternance counts) with exposure to GDPR cloud security and compliance.
Fluency in English(both written and spoken) as the primary working isrequiredin EMEA context.
In-depth knowledge of data protection laws and regulations particularly GDPR and the ability to design security architecture in compliance with these requirements.

What You Bring To the Table:

Familiarity with AWS/Azure/GCP security features and tooling.

Understanding ofSOC2ISO 27001/NIST concepts

Experience contributing to security awareness programs or internal training.

Prior exposure to sales/security questionnaires (RFP/RFI/RFQ)

Strong analytical mindset rigor autonomy and sense of responsibility.

Ability to assess risks and support incident response

Strong collaboration to drive change and bring peopletogethernatural leadership.

Excellent skills in communication and simplification; strong pedagogy and a supportive guiding approach

Why do people love working atSpendHQ

AtSpendHQweare :

Stronger Together: Everyone playsan important roleatSpendHQ. We deliver more success through shared goals and mutual break down silos andcollaborate.

People Focused: We care about those we work with and those we serve. We strive for strong results but not at the expense of people.

Our Best Every Day: We act with authenticity integritydependabilityand empathy. We are transparent with clients and each other. We foster an environment full of humble fun go-getters who approach every day as an opportunity to be their best.

Customer Obsessed: Our customers are the reason for our success. We work hard to provide solutions that make their lives easier and help them achieve extraordinary things.

Bold in Action: We believe in taking daring moves. We do everything with enthusiasm because we know our work is meaningful.

Whatdo youneed to know

Salarycommensuratewith experience. This is a full-time salaried position with a competitive benefits package:

Performancebonus

Time-saving account (CET)

Remote work policy

Flexible working hours

15 RTT

SwileCard 11

Equity Program

Cooptation bonus

The role reports to ourCTObased positionisbased inLyonour EMEA Headquarter.

Important notice:All legitimateSpendHQrecruiting communications comeonlyfrom email addresses ending in@and relate to roles posted on Experience:

Key Skills

Splunk
IDS
Network security
Computer Networking
Identity & Access Management
PKI
PCI
NIST Standards
Security System Experience
Information Security
Encryption
Siem

Apply Now

About Company

SpendHQ

Get complete visibility into your organization's spend data with SpendHQ. Our AI-powered platform delivers actionable insights for strategic procurement.

View Profile View Profile

AI AutoApply

Apply to 100+ jobs with one click