Information Security Analyst

Didomi

Information Security Analyst ensuring ISO 27001 compliance for Didomi's Security & IT team. Supporting audit readiness and executing security operations with a focus on automation.

Posted 7/6/2026full-timeRemote • 🇫🇷 FranceMid-LevelSenior💰 €48,000 - €60,000 per yearWebsite

Tech Stack

Tools & technologies

AWSJamf

About the role

Key responsibilities & impact

Help maintain and improve our ISO 27001 management system, ensuring controls remain effective, documented, and continuously evidenced.
Contribute to internal audits, surveillance audits, and recertification cycles, including the upcoming unified audit covering Didomi and recently acquired business units.
Track corrective actions, nonconformities, and continuous improvement initiatives, supporting the security team in driving them to closure.
Carry out recurring activities on the security calendar in support of the security team, including vulnerability scanning campaigns, quarterly access reviews, risk assessments, business continuity tests, and policy review cycles.
Triage vulnerability findings from AWS GuardDuty, Inspector, and other sources, then work with the Security Manager to define remediation priorities and follow them through to closure.
Run periodic access reviews across critical systems (Google Workspace, AWS, Slack, JAMF, GitLab, GitHub, and internal applications), surfacing findings to the Security Manager and helping ensure they are remediated.
Contribute to the security team's reviews of new tools, vendors, and SaaS applications for security and compliance risks before adoption.
Help the security team assess and harden internal workflows, with a particular focus on identity, access management, MFA, SSO, and data handling.
Support the security team on security questionnaires, RFPs, and customer due diligence requests.
Support the security team on broader initiatives such as AI governance, SaaS governance, and integration of acquired entities into the ISO scope.

Requirements

What you’ll need

3+ years of experience in a GRC, compliance, or information security analyst role, ideally within a SaaS or technology company.
Solid working knowledge of ISO 27001, including Annex A controls, the audit process, and how to operationalize the standard rather than treat it as paperwork.
Hands-on experience with vulnerability management tools and access governance processes.
Hands-on experience with Vanta, including running ISO 27001 (or comparable) audits end-to-end on the platform.
Hands-on experience with the AWS security suite, in particular GuardDuty and Inspector, including triaging findings and proposing remediation priorities.
Demonstrated use of AI tooling to accelerate recurring compliance and documentation work. You should be able to walk us through concrete examples of what you have built or automated.
A strong bias toward removing process. You actively challenge controls, paperwork, and workflows that no longer earn their keep, and you propose lighter alternatives.
Strong written communication in English. You can explain security topics clearly to engineers, executives, and customers alike.
A pragmatic mindset: you favor controls that work in practice over controls that only look good on paper.

Benefits

Comp & perks

🌐 Worldwide ❌ Jobs You've Hidden ⭐️ Saved Jobs ✅ Applied Jobs ✉️ Email Alerts 👤 Account Didomi Website LinkedIn All Job Openings 51 - 200 employees 📋 Compliance ☁️ SaaS 🤝 B2B 💰 Series B on 2021-07 Compliance
SaaS
B2B Didomi is a leading provider of consent and preference management solutions for businesses around the world. Specializing in compliance with privacy regulations like GDPR and CPRA, Didomi helps organizations gather, manage, and streamline user consent across various digital platforms, including web, mobile, and connected TV. With products such as Consent Management Platforms (CMP) and Privacy Request tools, Didomi enables companies to build trust with their users through transparent data practices, while optimizing marketing performance and ensuring legal compliance. Information Security Analyst 🔥 41 minutes ago 🇫🇷 France – Remote 💵 €48k - €60k / year ⏰ Full Time 🟡 Mid-level 🟠 Senior 🔐 Security Analyst Apply Now Find Hiring Managers Customize resume + cover letter Report problem ☆ Save ☑️ Mark as applied ❌ Hide 📋 Description
Help maintain and improve our ISO 27001 management system, ensuring controls remain effective, documented, and continuously evidenced.
Contribute to internal audits, surveillance audits, and recertification cycles, including the upcoming unified audit covering Didomi and recently acquired business units.
Track corrective actions, nonconformities, and continuous improvement initiatives, supporting the security team in driving them to closure.
Carry out recurring activities on the security calendar in support of the security team, including vulnerability scanning campaigns, quarterly access reviews, risk assessments, business continuity tests, and policy review cycles.
Triage vulnerability findings from AWS GuardDuty, Inspector, and other sources, then work with the Security Manager to define remediation priorities and follow them through to closure.
Run periodic access reviews across critical systems (Google Workspace, AWS, Slack, JAMF, GitLab, GitHub, and internal applications), surfacing findings to the Security Manager and helping ensure they are remediated.
Contribute to the security team's reviews of new tools, vendors, and SaaS applications for security and compliance risks before adoption.
Help the security team assess and harden internal workflows, with a particular focus on identity, access management, MFA, SSO, and data handling.
Support the security team on security questionnaires, RFPs, and customer due diligence requests.
Support the security team on broader initiatives such as AI governance, SaaS governance, and integration of acquired entities into the ISO scope. 🎯 Requirements
3+ years of experience in a GRC, compliance, or information security analyst role, ideally within a SaaS or technology company.
Solid working knowledge of ISO 27001, including Annex A controls, the audit process, and how to operationalize the standard rather than treat it as paperwork.
Hands-on experience with vulnerability management tools and access governance processes.
Hands-on experience with Vanta, including running ISO 27001 (or comparable) audits end-to-end on the platform.
Hands-on experience with the AWS security suite, in particular GuardDuty and Inspector, including triaging findings and proposing remediation priorities.
Demonstrated use of AI tooling to accelerate recurring compliance and documentation work. You should be able to walk us through concrete examples of what you have built or automated.
A strong bias toward removing process. You actively challenge controls, paperwork, and workflows that no longer earn their keep, and you propose lighter alternatives.
Strong written communication in English. You can explain security topics clearly to engineers, executives, and customers alike.
A pragmatic mindset: you favor controls that work in practice over controls that only look good on paper. Apply Now 📊 Check your resume score for this job Improve your chances of getting an interview by checking your resume score before you apply. Check Resume Score 🌐 Worldwide Built by Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or support@remoterocketship.com Search Search Jobs by country Search jobs by city Search jobs by job title Search entry-level jobs Search junior-level jobs Search senior-level jobs Search jobs by tech stack Search jobs by contract type Search remote internships Search remote part-time jobs Remote jobs Anywhere in the World Companies Hiring Anywhere in the World Companies Hiring Sales People Anywhere in the World Companies Hiring Software Engineers Anywhere in the World Resources Advice Tips for finding remote jobs Interview questions and answers Resume examples Cover letter examples Post a job Affiliates Privacy policy Terms of service Job board SEO course AI Apply Copilot OpenClaw job finder Find jobs using your resume Jobs by Country Remote jobs anywhere in the world (Worldwide remote jobs) Remote jobs United States Remote jobs Australia Remote jobs Brazil Remote jobs Canada Remote jobs France Remote jobs Ireland Remote jobs Germany Remote jobs Netherlands Remote jobs Spain Remote jobs UK Popular Jobs Remote data analyst jobs Remote customer support jobs Remote executive assistant jobs Remote marketing jobs Remote product designer jobs Remote product manager jobs Remote project manager jobs Remote recruiter jobs Remote sales jobs Remote software engineer jobs Jobs by Type Remote full-time jobs Remote part-time jobs Remote contract jobs Remote internship jobs Remote entry-level jobs Remote jobs with no experience required Remote junior jobs (1-3 years of experience) Digital nomad jobs Remote jobs with no degree required Freelance remote jobs Temporary remote jobs Remote jobs hiring now Stay at home mom jobs

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

ISO 27001Vulnerability ManagementAccess GovernanceRisk AssessmentIdentity ManagementMulti-Factor Authentication (MFA)Single Sign-On (SSO)Audit ProcessContinuous ImprovementDocumentation Automation

Soft Skills

Pragmatic MindsetProcess ImprovementClear Communication