Security Engineer

SpendHQis a fast-growing and dynamicProcuretechScale-upwith an incredible collaborative company culture. Our team is constantly innovating we invented performance management forprocurementand we are a market leader and innovator in spend analytics. We provide procurement teams with the tools they need to drive value for their organization and we have fun doing it.TheSpendHQSaaS solution has been on the market for over 10 years. Our clients are recognized market leaders from both mid-size organizations and large multinational corporations. There are20000SpendHQusers across 500 global clients.It is thanks to each of our employees that we are where we are proudly havemoreover100team membersin 10 countries with headquarters inboth Atlanta and we are not stopping taking on newchallengesand we look forward to continuing to grow the company and team.Where you would fit in the teamAs a Security Engineer youll contribute to keeping SpendHQs cloud environments secure and compliant across daily with Sales Product/Engineering ITHRand Customer teams while reporting to the CTO(USA).What will your job entailDevelop and implement cloud security controls to protect data across our SaaS environments.Conduct security audits & vulnerability assessments on cloud systems and applications.Maintain security policies & procedures focused on cloud security and GDPR compliance.Support incident management (including investigation of potential GDPR breaches).Drive regulatory awareness & training helping colleagues adopt security‑first behaviors.Collaborate with DevOps/development teams to embed security in the pipeline.What experience and skills do you need to succeed35 years in information security (internship/alternance counts) with exposure to GDPR cloud security and compliance.Fluency in English (both written and spoken) as the primary working is required in EMEA context.In-depth knowledge of data protection laws and regulations particularly GDPR and the ability to design security architecture in compliance with these requirements.Familiarity with AWS/Azure/GCP security features and tooling.Understanding of SOC2 ISO 27001/NIST concepts.Experience contributing to security awareness programs or internal training.Prior exposure to sales/security questionnaires (RFP/RFI/RFQ).Strong analytical mindset, rigor, autonomy and sense of responsibility.Ability to assess risks and support incident response.Strong collaboration to drive change and bring people together natural leadership.Excellent skills in communication and simplification; strong pedagogy and a supportive guiding approach.Why do people love working at SpendHQAt SpendHQ we are :Stronger Together: Everyone plays an important role at SpendHQ. We deliver more success through shared goals and mutual break down silos and collaborate.People Focused: We care about those we work with and those we serve. We strive for strong results but not at the expense of people.Our Best Every Day: We act with authenticity, integrity, dependability and empathy. We are transparent with clients and each other. We foster an environment full of humble fun go‑getters who approach every day as an opportunity to be their best.Customer Obsessed: Our customers are the reason for our success. We work hard to provide solutions that make their lives easier and help them achieve extraordinary things.Bold in Action: We believe in taking daring moves. We do everything with enthusiasm because we know our work is meaningful.What you need to knowSalary commensurate with experience. This is a full‑time salaried position with a competitive benefits package:Performance bonusTime‑saving account (CET)15 RTTSwileCard 11Equity ProgramThe role reports to our CTO based position is based in Lyon, our EMEA Headquarter.We are an equal opportunity employer and value diversity at our company. We welcome applications from all qualified individuals regardless of race, ethnicity, gender, sexual orientation, disability, age or any other protected status. If you dont meet every requirement but believe you would be a great fit we encourage you to applyImportant noticeAll legitimate SpendHQ recruiting communications come only from email addresses ending in @ and relate to roles posted on Experience: ICKey SkillsSplunkIDSNetwork securityComputer NetworkingIdentity & Access ManagementPKIPCINIST StandardsSecurity System ExperienceInformation SecurityEncryptionSiemEmployment TypeFull TimeExperienceYearsVacancy1 #J-18808-Ljbffr