GRC Engineer
About the company
Created in Lyon in 2016 by three French entrepreneurs, Agicap is one of the fastest-growing scale-ups in Europe, with more than 8,000 clients, 600 employees, and rapid revenue growth (multiplied by 7 between 2021 and 2024). Agicap is part of the French Tech 120, which rewards the most promising startups in France.
Agicap enables the finance departments of mid-sized companies to effectively manage and forecast their cash flow, pay their suppliers, and get paid. By combining a cash management system with accounts payable and accounts receivable management solutions on a single platform, Agicap aims to become the new benchmark in cash management for mid-sized companies.
We have raised 145 million euros since our creation, from prestigious venture capital funds such as AVP, Greenoaks, Partech, and BlackFin, with a recent round in November 2024.
These additional resources further fuel our product innovation, allowing us to grow significantly and accelerate our international expansion across the world.
We are convinced that our success lies in our passionate and dedicated teams, committed to building a company where everyone can evolve and build their career. We are constantly looking for new talent, aiming for excellence and ready to join our ambitious adventure!
Our Security department is currently composed of 3 teams:
- Platform Security: In charge of technical security
- Product Security: In charge of all security topics surrounding our product
- Organizational Security: In charge of GRC topics at a global level
Your tasks
AGICAP is looking for a GRC Engineer to join our Organizational Security team. If you want to play a central role in data protection and strengthen information security in a dynamic and constantly evolving environment, this position is for you!
As a GRC Engineer, you will participate in the security of Agicap's information systems. You will participate in the definition and be responsible for the implementation of security policies and procedures to protect our data, infrastructure, and resources.
You will work in close collaboration with other Security teams and various AGICAP departments to identify risks and ensure compliance with current regulations.
🔧 Main Missions
- Governance:
Implement security projects from our roadmap
Maintain and improve our Information Security Management System (ISMS) and maintain our ISO27001 certification
Participate in all topics related to Compliance (ISO, SOC2, Swift, PDP, etc.), being a proactive proposer
Work closely with our legal team to implement the technical and organizational measures necessary for our GDPR compliance
- Risk analysis and audits
Identify, assess, and manage risks related to the security of information systems
Develop and monitor continuous improvement plans
- Implementation of security policies:
Enforce and evolve Agicap's Information Systems Security Policy (ISSP) and its associated policies
Ensure access control on the various applications used internally
Evaluate suppliers, monitoring their compliance and practices, and integrating security clauses into contracts
Participate in the management of security incidents as well as business continuity and disaster recovery incidents
- Employee awareness:
Promote security best practices within the different Agicap departments and implement solutions to support them on these topics
Lead internal phishing campaigns
- Management / Personal development:
Dedicate time to active monitoring and training on cybersecurity topics to stay at the forefront of industry trends and developments
Requirements
⭐️ Required Skills
- You have at least 2 years of post-graduate experience in GRC
- You have already participated in compliance plans: ISO27001, SOC2, etc.
- You speak English fluently
- You are a good communicator, enthusiastic and pedagogical, capable of sharing your knowledge and supporting your colleagues
- You have organizational skills and an analytical mind, and you demonstrate great rigor
- Mastery of standards and frameworks more specific to the financial sector is a BIG plus (Swift, DORA, …)
What we offer
🚀 What awaits you at AGICAP
- Initiative and concrete impact: at AGICAP, you will not only have the opportunity to take charge of important projects, but also to initiate them from their conception. As an active member of the security team, you can have a direct impact on strategic decisions and technological choices to ensure and guarantee the security of the company.
- A passionate and dynamic team: work with talented and motivated colleagues, ready to tackle cybersecurity challenges together
- Flexibility and remote work: we are open to remote work, 2 days.
- A continuous learning environment: develop your skills through stimulating and innovative projects, and take advantage of dedicated monitoring time to stay at the forefront of your field
- A human-sized security team: work within an agile and reactive structure, where each member has a significant impact on the team's success
How to apply
Process
- Video interview with Théo, Talent Acquisition Partner - 30min
- Technical interview with Richard your future manager - 1H - (If possible in person)
- Final interview with Geoffrey, Security Director and meeting the team - 1h - (If possible in person)