Back Market is the world's leading refurbished electronics marketplace with a team of more than 650, powering operations in 16 countries (and counting!). Back Market is undergoing meteoric growth and has raised $884 million, with a valuation of $5.7 billion. Our mission is simple: empowering people to buy tech sustainably by offering folks a high-quality, accessible, and more eco-friendly alternative to buying new electronics. Why? Refurbished tech helps lower our collective environmental impact.As Senior Security Engineer GRC, you will join the Governance, Risks and Compliance (GRC) Squad within the CyberSecurity Tribe. Our GRC squad is responsible for identifying and mitigating cyber and privacy risks, ensuring compliance with laws and standards (specifically ISO 27001, PCI-DSS, GDPR, CCPA, AI Act, NIS2) that guide Back Market's operations and decision-making processes.Being a domain expert and evangelist of cybersecurity and privacy best practices you will:Drive multiple cybersecurity and privacy initiatives to achieve our compliance and security goals by collaborating with Engineering, Legal, Product, and Business teams.Influence decision-making on new third-party partnerships, perform risk assessments on strategic projects or features, and offer expert guidance on security and privacy to educate and empower your colleagues and stakeholders.Provide support within the CyberSecurity tribe on technical security projects making sure we comply with our internal security and privacy policies.Contribute actively to the development and execution of our cybersecurity and privacy awareness strategy.What we're looking for:You are a talented engineer with at least 5 years experience of working on security or compliance programs, leading cybersecurity projects and ensuring the proper implementation of security best practices.You believe in the importance of a risk-based approach to define and maintain security objectives, policies, procedures and action plans necessary for succeeding in your mission.You care about explaining the rationales for the company's security choices, to ensure that colleagues understand and adopt them.For you, defining a security requirement without proper analysis or foundation is a non-sense.You master some best practices and standards such as the ISO/IEC 27000 series, including ISO 27001, 27005 or EBIOS RM.You are curious, structured and enjoy exploring new methods and technologies.You are transparent in your communication and are able to find solutions with your team and your stakeholders when you don't have an answer.You like to share knowledge and make your colleagues aware of good cybersecurity practices, by supporting your proposals with concrete examples and demonstrations.In-depth knowledge of PCI-DSS and GDPR would be appreciated.Great English verbal and written communication skills.Recruitment Process:Call with Marie, our Tech Talent Advisor for a better understanding of your search.#J-18808-Ljbffr
