.Back Market is the world's leading refurbished electronics marketplace with a team of more than 650, powering operations in 16 countries (and counting!). Back Market is undergoing meteoric growth and has raised $884 million, with a valuation of $ billion. Our mission is simple: empowering people to buy tech sustainably by offering folks a high-quality, accessible, and more eco-friendly alternative to buying new electronics. Refurbished tech helps lower our collective environmental impact. Be part of a great and growing adventure that will change the way the world consumes tech.As Senior Security Engineer GRC, you will join the Governance, Risks and Compliance (GRC) Squad within the CyberSecurity Tribe. Our GRC squad is responsible for identifying and mitigating cyber and privacy risks, ensuring compliance with laws and standards (specifically ISO 27001, PCI-DSS, GDPR, CCPA, AI Act, NIS2) that guide Back Market's operations and decision-making processes.Responsibilities: Drive multiple cybersecurity and privacy initiatives to achieve our compliance and security goals by collaborating with Engineering, Legal, Product, and Business teams.Influence decision-making on new third-party partnerships, perform risk assessments on strategic projects or features, and offer expert guidance on security and privacy to educate and empower your colleagues and stakeholders.Provide support within the CyberSecurity tribe on technical security projects ensuring compliance with our internal security and privacy policies.Contribute actively to the development and execution of our cybersecurity and privacy awareness strategy.What we're looking for: You are a talented engineer with at least 5 years of experience in security or compliance programs, leading cybersecurity projects and ensuring the proper implementation of security best practices.You believe in the importance of a risk-based approach to define and maintain security objectives, policies, procedures, and action plans necessary for succeeding in your mission.You care about explaining the rationales for the company's security choices to ensure that colleagues understand and adopt them.You master best practices and standards such as the ISO/IEC 27000 series, including ISO 27001, 27005 or EBIOS RM.You are curious, structured, and enjoy exploring new methods and technologies.You are transparent in your communication and can find solutions with your team and stakeholders when you don't have an answer.You like to share knowledge and make your colleagues aware of good cybersecurity practices, supporting your proposals with concrete examples and demonstrations.In-depth knowledge of PCI-DSS and GDPR would be appreciated.Great English verbal and written communication skills.Recruitment Process: Call with Marie, our Tech Talent Advisor for a better understanding of your search.Meeting with Quentin & Gwendal for a deep dive on your past experience
