GRC Project Manager (M/F)

GRC Project Manager

Horizon Trading Solutions ?

For over 25 years, Horizon has supported financial market players worldwide by developing innovative software solutions dedicated to electronic trading. Today, more than 85 clients across 26 countries use our platforms to automate and optimize their trading activities.

A pioneer in its market, Horizon relies on cutting-edge technology, a strong culture of innovation, and recognized expertise in the fields of electronic trading, automation, artificial intelligence, and financial modeling.

Horizon is a human-sized company of nearly 150 employees distributed between Paris, Rennes, Nantes, Montreal, Bangkok, Singapore, Hong Kong, and Dubai.

We are deeply committed to ESG and support our growth through the progressive structuring of the group: B-Corp certification obtained in 2022, SOC 2 Type II compliance certified since 2021, partnerships with NQT, Planet Tech'Care, Ethical AI, Lakaa. We are driven by the desire to transform the image of finance to make it more responsible, innovative, and disruptive.

THE ROLE CONTEXT

Ambitious, we are aware that our growth must be accompanied by a rigorous structuring of our organization. As GRC Manager, you will report to the CFO and play a key role in strengthening our governance, risk management, compliance, and internal control frameworks.

You will work closely with the Finance, Legal, IT, Infrastructure, HR, and operational teams to identify risks, strengthen our internal processes, monitor our regulatory obligations, and support the Group's structuring projects.

As part of the Group's structuring, a CISO will also be recruited shortly, reporting to the CTO. The GRC Manager and the CISO will work in close collaboration: the GRC Manager handles the risk, compliance, and internal control angle; the CISO handles the technical, systems security, and cyber angle.

YOUR DAILY LIFE

Risk Management & Internal Control

• Develop and maintain the Group's risk mapping: identify, assess, and monitor operational, financial, technological, and organizational risks.

• Define and monitor associated action plans (PACS, PTR) with various business managers, and implement key risk indicators (KRI).

• Contribute to the feeding of management dashboards and ensure the traceability and enforceability of the work produced.

• Strengthen and formalize the internal control framework.

• Participate in discussions related to business continuity (BIA, PCA, PCIT): scoping the global framework, organizational and financial aspects, in coordination with the CISO for the cyber-resilience aspect.

Regulatory Compliance & Governance

• Ensure the monitoring of compliance topics within the various entities of the Group.
• Maintain and evolve internal policies and procedures (charters, cross-functional policies, Group governance).
• Support teams on compliance and best practice topics, and ensure the acceptance and implementation of defined policies.

Data Protection & Third-Party Management

• Implement practices relating to data protection and confidentiality within the framework of organizational processes, financial, and commercial strategy.
• Conduct, monitor, and review impact assessments (PIA/DPIA) using recognized standards, frameworks, and methodologies.
• Ensure the monitoring of third-party risks: assessment and monitoring in connection with regulatory and contractual requirements.

• Participate in responses to client questionnaires and due diligences.

SOC 2 Steering & Audits

• Lead the Group's SOC 2 program and coordinate all internal stakeholders involved in the continuous maintenance and improvement of the framework.

• Prepare and support audits: consolidate evidence, demonstrate the level of compliance, and ensure the quality of responses to internal and external controls.

• Coordinate annual audits, ensure the follow-up of remediation plans and formulated recommendations.

• Participate in client audits related to compliance and internal control topics.

• Contribute to exchanges with auditors, regulators, and institutional interlocutors to integrate regulatory developments and anticipate their expectations.

Reporting & Strategic Projects

• Prepare risk and compliance reporting for management and the Board.

• Ensure the follow-up of action plans and cross-functional projects.

• Participate in the structuring and evolution of the Group's GRC framework, and evolve tools, methods, and frameworks.

• Propose and manage risk-sharing options with the relevant stakeholders.

Interfaces with the CISO

These topics are conducted in close collaboration with the CISO. The GRC Manager ensures scoping and coordination; the CISO holds technical and operational responsibility.

• SOC 2: the GRC Manager leads the global program and coordination; the CISO is responsible for technical controls and their implementation.

• Business continuity: the GRC Manager scopes the organizational and financial framework; the CISO leads the cyber-resilience aspect.

• Risk mapping: the CISO reports cyber and SSI risks to the GRC Manager, who integrates them into the Group's global mapping.

• Audits and regulators: coordination of common responses on compliance and security aspects.

COULD IT BE YOU?

• Higher education (Business School, Engineering, Audit, Internal Control, or equivalent).

• 5 to 7 years of experience in risk management, internal control, or compliance.

• Experience in a technological, software, SaaS, or fintech environment is appreciated.

• Experience in Audit, Risk Advisory, Internal Controls, or Regulatory Compliance within a Big 4 (PwC, EY, Deloitte, KPMG) would be particularly appreciated.

• Good knowledge of SOC 2, ISO 27001 frameworks, or compliance issues; cyber sensitivity is a plus, without being at the core of the position.

• Excellent analytical, structuring, and synthesis skills.

• Ability to manage several projects in parallel and coordinate various interlocutors.

• Very good level of English (reading, speaking, writing).

• Pragmatic, autonomous, and solution-oriented.

• Strong interpersonal skills and ability to coordinate multidisciplinary teams.

Salary Range : €60,000 - €70,000 gross annual fixed salary, depending on profile and experience.

Do you recognize yourself in this profile? Don't wait any longer and Join the Horizon adventure!

Horizon is an equal opportunity employer. We promote diversity, multiculturalism, and inclusion.