Information Security Analyst, Didomi
Freelance
€48-60k
Building tools to manage data privacy
Open for applications
Building tools to manage data privacy
101-200 employees
Open for applications
€48-60k
101-200 employees
Company mission
To make privacy easier for everyone and an obvious choice for companies.
Role
Who you are
- 3+ years of experience in a GRC, compliance, or information security analyst role, ideally within a SaaS or technology company
- Solid working knowledge of ISO 27001, including Annex A controls, the audit process, and how to operationalize the standard rather than treat it as paperwork
- Hands-on experience with vulnerability management tools and access governance processes
- Hands-on experience with Vanta, including running ISO 27001 (or comparable) audits end-to-end on the platform
- Hands-on experience with the AWS security suite, in particular GuardDuty and Inspector, including triaging findings and proposing remediation priorities
- Demonstrated use of AI tooling to accelerate recurring compliance and documentation work. You should be able to walk us through concrete examples of what you have built or automated
- A strong bias toward removing process. You actively challenge controls, paperwork, and workflows that no longer earn their keep, and you propose lighter alternatives
- Strong written communication in English. You can explain security topics clearly to engineers, executives, and customers alike
- A pragmatic mindset: you favor controls that work in practice over controls that only look good on paper
- Nice to have
- Experience supporting HIPAA or HITRUST programs, and comfort mapping requirements across frameworks
- Familiarity with cloud environments (AWS in particular) and with common SaaS administration (Google Workspace, Slack, identity providers)
- Exposure to security questionnaire platforms and trust center tooling
What the job involves
- We are looking for an Information Security Analyst to join our Security & IT team and become the operational backbone of our ISO 27001 program
- You will support the day-to-day work that keeps Didomi audit-ready year-round and run recurring security activities across the company
- This role is roughly 80% recurring compliance work: evidence collection, audit preparation, access reviews, vendor reviews, and security questionnaire responses
- Leverage is the whole game
- We want someone who reaches for automation and AI tooling as a default and who actively pushes back on process that no longer earns its keep, rather than someone who accepts that compliance work has to be slow or manual
- This role reports to the Security Manager
- ISO 27001 program and audit readiness
- Help maintain and improve our ISO 27001 management system, ensuring controls remain effective, documented, and continuously evidenced
- Contribute to internal audits, surveillance audits, and recertification cycles, including the upcoming unified audit covering Didomi and recently acquired business units
- Track corrective actions, nonconformities, and continuous improvement initiatives, supporting the security team in driving them to closure
- Security operations and recurring activities
- Carry out recurring activities on the security calendar in support of the security team, including vulnerability scanning campaigns, quarterly access reviews, risk assessments, business continuity tests, and policy review cycles
- Triage vulnerability findings from AWS GuardDuty, Inspector, and other sources, then work with the Security Manager to define remediation priorities and follow them through to closure
- Run periodic access reviews across critical systems (Google Workspace, AWS, Slack, JAMF, GitLab, GitHub, and internal applications), surfacing findings to the Security Manager and helping ensure they are remediated
- Cross-functional security support
- Contribute to the security team's reviews of new tools, vendors, and SaaS applications for security and compliance risks before adoption
- Help the security team assess and harden internal workflows, with a particular focus on identity, access management, MFA, SSO, and data handling
- Support the security team on security questionnaires, RFPs, and customer due diligence requests
- Support the security team on broader initiatives such as AI governance, SaaS governance, and integration of acquired entities into the ISO scope
- Tools you’ll work with on a regular basis
- Compliance and GRC: Vanta
- Cloud and security monitoring: AWS, AWS GuardDuty, AWS Inspector, AWS Security Hub
- Identity and access: Google Workspace, SSO and MFA providers
- Endpoint and device management: JAMF
- Code and engineering: GitLab, GitHub
- Collaboration and documentation: Slack, Notion, Google Workspace
- SaaS governance and vendor review: internal review workflows and questionnaire tooling
Our take
With rising personal data privacy concerns among consumers globally, brands and publishers have understood the urgent need to invest in data transparency.
Established in 2017, Didomi’s CMP (consent management platform) is designed to assist companies as they collect, store, and manage users’ consent choices. Its preference center also enables businesses to offer users access to their personal data and update their preferences at any time.
The company sets itself apart by focusing entirely on consent and preference management, rather than trying to offer a whole range of solutions related to consent and preference management. This has enabled Didomi to go a lot deeper in terms of product capabilities and features compared to competitors in the space. The company has worked with enterprises including Rakuten, Orange, and Adevinta.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
-15% employee growth in 12 months
Company
Funding (last 2 of 3 rounds)
Apr 2025
$83.2m
GROWTH EQUITY VC
Jul 2021
$40m
SERIES B
Total funding: $129m
Company benefits
- Remote-friendly: Option to work in a remote/hybrid configuration (depending on role).
- Compensation: Competitive salaries.
- Learning & career: Continuous career growth with access to our e-learning platform.
- Wellbeing: Access to quality of life perks (sport stipend, home office equipment, etc).
- Innovation & impact: Team initatives from yearly hackathons and corporate social responsibility.
- Diversity & inclusion: International, respectful workspace where everyone can be their true selves.
- Feedback culture: Open environment where employees can express their opinion and concerns.
Company HQ
Bonne-Nouvelle, Paris, France
Leadership
Jawad Stouli
(Co-Founder & CTO)Previously VP of Engineering at MediaMath. Has previously founded and served as CTO at Tactads (acquired by MediaMath), and CitizenPlace (acquired by AssoConnect).
Raphaël Boukris
(Co-Founder & CRO)Previously Head of Sales at Qapa (which was acquired by Adecco). An early stage angel investor in subscription based platforms.
Romain Gauthier
(Co-Founder & CEO)Previously co-founded Tactads, and was EMEA Director of Platform Integrations and then ofActivation at MediaMath.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 8 more jobs at Didomi