Security Compliance Officer

👋 Welcome to Tomorro

Tomorro is an AI Contract Lifecycle Management platform that reinvents how legal, finance, and business teams collaborate on their contracts. With ORO, our AI assistant, we eliminate contractual friction: automation, seamless workflows, and accelerated, secure negotiations. The result: teams that move up to 4x faster, with more control and impact.

Today, Tomorro supports thousands of users and hundreds of companies, from hypergrowth startups to large groups like Nestlé, Vinci, or JCDecaux. After a €40M raise, we are accelerating strongly and establishing ourselves as a key player in Legaltech in Europe. In 2025, we are launching our European expansion with Germany as our first market. Our ambition: to become the European leader in CLM by 2030.

🤖 An AI-first culture

At Tomorro, everyone is an AI builder. CX, Ops, Sales, Product, HR, Tech: every team builds, prompts, automates, and vibe codes. AI is not a separate project; it is our way of working every day.

ThursdAI: every Thursday afternoon, we stop the run to build cross-team: new agentic workflows, internal automations, tool exploration, and side projects that directly impact our daily lives and performance.

Your role:

Tomorro is growing fast: Enterprise expectations around trust, compliance, and security are increasingly strong. We are also accelerating internationally and in AI, two areas that require solid security governance: data management, provider selection, and retention policies.

For us, security is a growth lever, not a safeguard. It must enable deals to close faster, not slow them down. We are looking for a pragmatic leader, someone who knows how to weigh speed against risk, propose concrete mitigations rather than blockages, and simplify complex topics just as easily for a dev as for an Enterprise client.

You play a bridging role between Tech, Sales, and Regulation.

Your missions:

• Business enabler (pre-sales): Manage complex security questionnaires and provide support on key Enterprise calls. You transform security into a closing argument, not an obstacle.
• Compliance & Audits: Lead SOC 2, ISO 27001, GDPR, and DORA programs in close collaboration with Sarah, Senior Legal Counsel — from implementing controls to continuous evidence collection. Zero surprises in audits.
• Governance & Risks (AI focus): Define and enforce security policies (PSSI) and safeguards for AI/LLM data flows: contracts, "no training" clauses, retention, and isolation. This is a core strategic subject for us.
• Security culture: Train teams, run crisis exercises (tabletop), and coordinate architecture reviews and external pentests.
• Security by design: Work hand-in-hand with the Platform and Product teams to embed best practices as early as possible — with as little friction as possible.

Your impact:

After 3 months

• Clear vision of the current posture, risks, and priorities
• Security questionnaires: structured process and scalable playbook in place
• Evidence routines and audit plan launched

After 6 months

• Compliance programs running smoothly and autonomously
• Enterprise security reviews concretely help close deals
• AI governance documented, explicit, and operational

Your profile:

Even though we know the perfect profile does not exist, here is what it would look like:

• Experience with SOC 2 and/or ISO 27001 in a SaaS or scale-up context
• Risk-based mindset: you know how to prioritize, propose pragmatic mitigations, and not block just for the sake of blocking
• Excellent communication: you simplify topics for devs, execs, or non-technical clients effortlessly
• Comfortable in a pre-sales context: questionnaires, security reviews, client calls
• Autonomous, structured, and capable of bringing order to ambiguity
• Fluent English (written and spoken)

Our recruitment process:

1. HR Screening: 30 min video call with Pauline, Talent Recruiter
2. Background Interview: 1h video call with Célestin, Engineering Manager
3. Case Study: 1h in our offices with Sarah and Cédric, IT manager
4. Final review: 45 min video call with Antoine, CEO

Our compensation model

We offer competitive compensation compared to the best AI, SaaS, and Tech companies:

• a package of €54,000 to €72,000 gross per year, depending on the profile and the evaluation conducted during the process.

This range is provided for information purposes and does not constitute a commitment on our part at this stage. If your expectations are higher, do not hesitate to tell us: it does not close the door. We have chosen to share our entire compensation model with full transparency.

How we work:

• High velocity: we experiment fast, iterate continuously, with autonomous teams and few unnecessary processes.
• AI builders: everyone uses AI daily to work better and faster. We build, automate, and continuously challenge our ways of doing things.
• Excellence & simplicity: we aim for a high level of quality without unnecessary complexity. Keep it simple, effective, and well-executed.
• Building together: feedback, mutual aid, and collective success. We win (and learn) as a team.

Tomorro is also:

• An international, tight-knit, and ambitious team around common values
• Real opportunities for learning and evolution
• Thursday afternoons dedicated to cross-team AI topics: a time to build, prototype, and learn
• A remote policy (teleworking is possible 1 to 2 days per week)
• MacBook and monitor to work in the best possible conditions
• Central and spacious offices in the heart of Paris (located in Bourse)
• Afterworks and seminars with the whole team