Technology

Security & Compliance Engineer, GRC & Product Security, Security and IT Team

ScalityParis, FranceFull-timeSalary not listed · Typical pay in FrancePosted Nov 5, 2026

Scality has an opening for a Security & Compliance Engineer, GRC & Product Security, Security and IT Team in Paris, France. It is listed as a full-time position.

Written by Dev Global Jobs

DGJ summary of this job

Our own short read of this listing, built only from the facts it gives. The employer’s original text follows further down.

Scality has an opening for a Security & Compliance Engineer, GRC & Product Security, Security and IT Team in Paris, France. It is listed as a full-time position.

Reading the advert, the employer asks for 2 to 30 years of experience and French language skills.

Skills and tools named in the text include Python, AWS, Azure, GCP, Terraform, Linux, Salesforce and Jira.

No salary is given in this listing, so check the official pay figures in the DGJ Insight section below where they exist.

Benefits mentioned in the advert: bonus.

The advert does not mention visa sponsorship. If you would move to France for this job, check the official work permit route first (DGJ Insight lists it where we have it).

Dev Global Jobs found this job on Arbeitnow on Nov 5, 2026.

Employer: Scality
Location: Paris, France
Job type: Full-time
Pay: Not stated by the employer
Experience asked: 2 to 30 years
Languages asked: French
Found: Nov 5, 2026 on Arbeitnow
Employer text: 1,024 words, about 5 min to read

Skills named in the advert

PythonAWSAzureGCPTerraformLinuxSalesforceJiraSaaSSIEM

Before you apply

Apply only on the official page (arbeitnow.fr). Dev Global Jobs is not the employer and never asks for a fee.
Compare your own experience with the 2 to 30 years the advert asks for, and show it clearly near the top of your CV.
Mirror the skills the advert names (Python, AWS, Azure and GCP) in your CV where you really have them; applicant tracking systems look for these words.
Say your level in French plainly (for example B2 or C1).
Read the employer’s full text below (about 5 min) before you apply.
Build or check your CV with the free DGJ CV Builder.

Only on Dev Global Jobs

DGJ Insight

Our own data about this role and place, from official statistics and our live job index.

Updated Nov 5, 2026

Pay benchmark

Average wage, France

EUR 44,304 average / year

Source: OECD Average annual wages, 2025

Cost of living · Paris

85.7 vs New York = 100

UN living-cost index for Paris (ICSC post adjustment 50.5), as of 1 Oct 2026.

Source: ICSC post adjustment classifications (icsc.un.org)

Work permit route

Talent Passport: Qualified employees, researchers, artists, investors; multi-year permit
Employee (salarié) visa: Employer work authorisation from the labour office
Temporary worker visa: Contracts under 12 months

Job description

About the role

Full text from the employer, as published on Arbeitnow, arranged into sections. Nothing added or removed.

01About Scality

Scality solves organisations' biggest data storage challenges: growth, security, performance, and cost. Designed for end-to-end cyber resilience, only Scality S3 object storage with CORE5 safeguards data at every level of the system, from API to architecture. Its patented MultiScale Architecture enables limitless, independent scalability in all critical dimensions to meet the unpredictable demands of modern workloads. The world's most discerning companies depend on Scality to accelerate high-performance AI initiatives, optimize cloud deployments, and defend their data with confidence. Recognized as a leader by Gartner, Scality software is reliable, secure, and sustainable.

The job context

02The team

Our IT & Security team builds, runs and secures Scality's IT infrastructure. It also supports the whole Scality community: employees, contractors, consultants and freelancers. We make sure everyone works in a secure, compliant and up-to-date environment. We also bring security expertise to our products (RING, ARTESCA, ADI) and to our customers.

You will join a team of 4 to 5 people with varied backgrounds (development, security, IT operations, helpdesk) and 2 to 30+ years of experience.

03The mission

You will own Scality's information security compliance program and coordinate the team's security operations. You will lead our ISO 27001 and ISO 42001 (AI management system) certifications and manage vulnerability (CVE) follow-up with Engineering.

You will answer customer security requests and audits. You will also help our products meet new regulations such as the EU Cyber Resilience Act (CRA).

The role is about 70% governance, risk and compliance (GRC) and product security, and 30% hands-on security operations.

The job description

04You will own (Responsible)

Security operations coordination: be the point of contact for incoming IT & Security requests, prioritize them and dispatch them within the team.

Vulnerability management: Assess product exposure to CVEs by leveraging internal tools powered by our Software Bills of Materials (SBOMs).. Handle customer security requests (RD tickets) with Engineering and Support until a fix version or a customer answer is delivered. Track scan and pentest reports through remediation.

ISO 27001 and ISO 42001 programs: maintain the framework, policies and procedures in our GRC tool. Run risk analysis and treatment plans, objectives and indicators, and the Statement of Applicability. Prepare internal and external audits and follow up on nonconformities and improvement opportunities.

Control management: run the monthly, quarterly and annual controls (account and access reviews across HR system and SSO, application access, offboarding checks), automate them in Jira and keep audit evidence.

ISMS processes: run security incident management and change management in Jira (workflows, fields, records), and the business continuity part of customer requests (ISO 22301-type questionnaires).

Third-party and application security reviews: assess new SaaS tools, suppliers and internal applications or automations (no-code tools, Slack or AI integrations). Keep the supplier inventory and the service account inventory up to date.

AI governance: maintain the AI systems inventory, review the AI features of tools before use, and follow regulatory changes (EU AI Act).

Personal data: maintain the personal data inventory and processing records (GDPR, CNIL guidance) together with the data protection contact.

Customer trust: answer security questionnaires and RFPs, and prepare evidence packages for customer audits (banking, telecom and public-sector customers).

Security awareness: plan and run awareness and phishing campaigns, and track participation and click rates for managers.

05You will contribute to (Contributor)

Product security and certifications: prepare the EU Cyber Resilience Act (CRA) technical files per product (compliance matrix, risk assessment, SBOM, vulnerability handling, RACI). Also contribute to CISA Secure by Design commitments and UK Cyber Essentials. Bring security input to the product roadmap, the development teams and the product documentation.

Data leak prevention: define and tune DLP indicators and alerts (Google Workspace, Salesforce event monitoring) and investigate alerts.

Infrastructure security: IaaS/PaaS security, monitoring and SIEM alerting, reporting of security incidents, business continuity and disaster recovery.

Automation and tooling: scripts (Python, Bash) and Jira automations that reduce manual work.

IT operations: account, application and permission management, level 1 and 2 network and security incidents.

Mentoring: onboard and supervise interns or work-study students on security topics.

06You will be informed of

Laptop fleet and IT room hardware, SSO integration and SaaS administration, level 3 network management, CI security, and relations with external IT providers. Other team members handle these topics.

Desired profile

07In general

Degree in cybersecurity, information systems or equivalent experience

2 to 5 years of experience in information security, GRC or security operations

Based in France

08Technical skills

Practical experience with ISO 27001 (2022): risk analysis, Statement of Applicability, controls, internal or certification audits

Knowledge of risk methodologies (ISO 27005, EBIOS RM or similar)

Understanding of vulnerability management: CVE, CVSS, SBOM, reading scan and pentest reports

Basic knowledge of identity and access management (SSO, SAML/OIDC, MFA, access reviews)

Ability to assess the security of a SaaS tool or an application: data flows, permissions, data retention, use of data for AI training

Jira (workflows, automation) and spreadsheets for control tracking

Python or Bash scripting for automation

Clear writing for policies, procedures and answers to customers

09Bonus skills

ISO 42001, EU AI Act or AI risk management (e.g. ISO 23894)

EU Cyber Resilience Act, NIS2, CISA Secure by Design, UK Cyber Essentials

GDPR and personal data inventories

DLP, SIEM, centralized logging and monitoring

Linux, cloud (AWS, GCP, Azure), Terraform, Packer, SaltStack

Experience in a software vendor and with enterprise customers' security audits

10Personal skills

Organized and rigorous: you run many topics in parallel and follow each one to closure

Autonomous and proactive: you follow up with other teams without waiting to be asked

Good communicator, able to explain security requirements to non-experts and convince them

Curious, eager to learn new norms and regulations as they come out

Willing to share knowledge and guide interns

11Languages

Fluent French (the team is based in France)

Professional English: daily work with US teams; all policies, documentation and many customer questionnaires are in English

Our tools

GRC platform (OverSecur), Jira and Confluence, OneLogin SSO, Google Workspace, Slack, Salesforce, BambooHR, phishing simulation and awareness platform, internal CVE/SBOM platform, Grafana, vSphere, Terraform, Packer, SaltStack, Python and Bash.

Find more English Speaking Jobs in France on Arbeitnow

CSI

Ask CSI about this job

Answers link to jobs and tools on Dev Global Jobs.

Community

Review Dev Global Jobs

Used this site to find a job? Tell other job seekers what worked and what did not.

Write a review on TrustpilotIt takes about two minutes↗