Complétez votre profil pour recevoir des offres adaptées.

Mon espace

Mes CV vus

Mes candidatures

Mes alertes

Mon profil

Paramètres

Déconnexion

Téléchargez l'app et postulez dans les premiers !

Se connecter S'inscrire Formation

Téléchargez l'app et postulez dans les premiers !

Trouver mon job s
Trouver mon entreprise s
Accès recruteur
- Diffuser ma première offre
- Déjà client

Emploi
- Missions d'intérim
- Offres de stage
- Offres en alternance
- Créer mon alerte
- Déposer mon CV
- Salaire brut net
Formation
Mon compte
- Se connecter Mon compte
- S'inscrire
- Mon espace
- Mes CV vus
- Mes candidatures
- Mes alertes
- Mon profil
- Paramètres
- Déconnexion

Hellowork a estimé le salaire pour cette offre

Cette estimation de salaire pour le poste de Senior Cybersecurity Grc - N H/F à Paris est calculée grâce à des offres similaires et aux données de l’INSEE.

Cette fourchette est variable selon expérience.

Salaire brut min

42 500 € / an 3 542 € / mois 23,35 € / heure

Salaire brut estimé

58 800 € / an 4 900 € / mois 32,31 € / heure

Salaire brut max

73 200 € / an 6 100 € / mois 40,22 € / heure

Cette information vous semble-t-elle utile ?

Merci pour votre retour !

Senior Cybersecurity Grc - N H/F Believe

Paris - 75
CDI
Bac +5
Média • Internet • Communication
Exp. 3 ans min.

Lire dans l'app

Les missions du poste

We're hiring a Security GRC Engineer to help us build governance, risk, and compliance in a way that actually works in a modern tech organization: pragmatic, automation-friendly, and aligned with agile delivery.
This is not a paperwork job. You'll partner closely with engineering, product, workplace, auditors and security to turn risk management and compliance into clear, usable guardrails and you'll challenge processes that create friction without improving security.

What you'll do

- Risk management that drives decisions
Run lightweight, continuous risk assessment and threat modelings with teams (not once-a-year rituals).
Translate risk into clear options: impact, likelihood, tradeoffs, and recommended actions.
Track remediation plans and provide visibility through simple reporting.
- Build practical governance
Maintain and improve security policies/standards so they're short, actionable, and adopted.
Create control objectives that fit real engineering workflows (CI/CD, cloud, SaaS, identity).
- Compliance, without the theater
Support audits and evidence collection with a focus on efficiency and reusability.
Help align our program with recognized frameworks (e.g., NIST ) in a pragmatic way.
Develop compliance-as-code habits where possible (automated checks, continuous evidence).
- Third-party risk (vendors, partners)
Drive assessments, follow-ups, and risk treatment with procurement and stakeholders.
Push for scalable vendor processes (tiering, standard questionnaires, measurable requirements).
- Security enablement
Create playbooks, templates, and self-service material that teams can use without heavy guidance.
Coach teams to understand risk and make better security choices early in delivery.

Le profil recherché

Experience in GRC / risk / compliance in a tech environment (security, cloud, SaaS, engineering orgs).
Strong understanding of security fundamentals: identity, access, logging, incident response, cloud shared responsibility, secure SDLC (at a practical level).

- Ability to write simple, clear policies/standards and translate requirements into engineering-friendly controls.
- Comfort with ambiguity and agility: you can iterate, prioritize, and deliver incremental improvements.
- Excellent stakeholder skills: you can influence without authority, challenge respectfully, and get things done.

Bonus points

- Experience aligning programs to frameworks (NIST CSF, ISO 27001, SOC 2, etc.).
- Experience with vendor risk platforms or automation (workflows, evidence collection, dashboards).
- Familiarity with compliance as code concepts, continuous controls monitoring, or security tooling.
- Experience partnering with product/engineering teams on secure-by-design practices.

How we work

We value ownership, transparency, and pragmatism.

We prefer automation and repeatability over manual processes.

We challenge the old way when it's slow, fragile, or meaningless.

We aim to be a security team that teams want to work with.

Bienvenue chez Believe

Believe is a global artist development company. We empower local artists, labels and
publishers to grow their audiences at each stage of their careers with expertise, respect,
fairness and transparency.
Operating in 50+ countries, with more than 2,000 employees, Believe oCers a full range
of services including audience development, publishing, marketing and distribution,
with a tailor-made approach to fit any artist, label or publisher.
Believe champions independence and innovation through a unique model that
combines local expertise with a global tech platform, delivering exclusive solutions for
artists to promote and monetize their music thanks to strategic partnerships with
leading global digital service providers.
With a leading portfolio of brands that includes Nuclear Blast, naïve, TuneCore, Groove
Attack, Sentric, AllPoints and Byond, Believe artists generated more than 800 billion
streams worldwide in 2024 across all genres, and were recognized with more than 70
leading industry awards.

Believe is a simplified joint-stock company under French law.
Ready to set the tone with Believe ?