Security Lead

HEALTH CAN’T WAIT. Not for symptoms to get worse. Not for a six‑month appointment. Not for a system to catch up. But that’s exactly how healthcare works today. You wait, until you can’t. Alan exists to end the wait. Health is a universal right, and we believe this right can only become real when it’s coupled with prevention. We need to stop treating health as something we repair and start treating it as something we build, every day. It’s not solely a question of willpower. It’s the healthcare system itself that needs to work for everyone, in a sustainable way. So we are building the new standard in prevention insurance. Alan is the first company that integrates insurance, prevention, and care into a single, acclaimed user experience. We are on an incredible journey to build a global leading company, with a unique culture. We already partner with 40K+ companies of all sizes, serving more than 1M+ members, and have reached €800M+ in ARR. Prevention as the new norm. That's what we're building with our team of 800+ people. If it speaks to you: we're hiring across France, Spain, Belgium, and Canada. And beyond. THE TEAM AND YOUR MISSIONS You will lead Alan's Security team, a highly technical group operating across 10+ countries in a regulated health insurance environment. As Security Lead, your missions span four core areas: * Lead and grow the security team: Coach, structure, and elevate a team of security experts. Set clear priorities, define ownership, and create conditions for genuine professional growth. * Own security in the AI era: Define Alan's posture on AI-driven threats and opportunities. Build frameworks that let product and engineering teams ship AI-powered features safely and at speed. * Scale security across 10+ countries: Own the ISMS and certification programme (ISO 27001), navigate a complex multi-regulatory environment (DORA, HDS, RGPD, NIS2, PGSSI-S), and ensure Alan's security programme keeps pace with its geographic expansion. * Build and evolve Alan's security strategy: Position security as a long-term business asset and trust-builder for members, regulators, and partners. Align Legal, DPO, Risk, Engineering, and Product on security requirements, and build a security culture that empowers rather than restricts.   THE CHALLENGE Alan is a fast-growing health insurer operating in a uniquely complex environment. The challenges you will navigate include: * A shifting threat landscape: AI is reshaping both attack vectors and defensive possibilities. You will need a clear point of view on LLM security, agent risks, and AI governance, and the ability to translate that into concrete, actionable priorities. * Multi-country regulatory complexity: Operating across 10+ countries means managing a dense, evolving regulatory stack (DORA, HDS, RGPD, NIS2, PGSSI-S) while keeping the business moving. You will need to translate regulatory requirements into technical controls without creating bottlenecks. * Health sector specifics: Alan handles sensitive health data at scale. This comes with sector-specific requirements (ANS framework, CERT Santé, HDS) that demand both technical precision and operational rigor. * Influencing at scale without direct authority: Security touches every function. Your ability to align Legal, DPO, Risk, Engineering, Product, and Operations, and make them come to you early, will be as important as your technical depth. * Running security as a living programme, not a compliance exercise: The goal is not to pass audits. It is to build a programme that feeds real decisions, scales with the company, and earns genuine trust. WHO WE ARE LOOKING FOR * Proven experience leading a security (or security-adjacent) team, with concrete examples of people development and growth * At least one full ISO 27001 certification or recertification cycle led end-to-end * Solid understanding of the regulatory stack relevant to Alan's context: DORA, HDS, RGPD, NIS2, PGSSI-S * Experience running security risk cartography, ideally with EBIOS RM- Experience conducting vendor security assessments and defining contractual security requirements * Clear understanding of AI security: LLM threats, agent risks, AI governance frameworks (OWASP LLM Top 10, MITRE ATLAS, EU AI Act) * Full professional fluency in English required; French is a plus * Bonus: experience in a regulated health sector environment (ANS framework, CERT Santé, HDS)   This position targets level F+ on our level grid.   HOW WE WORK Location: You must be legally eligible to work from France. We offer remote work flexibility, but we value in-person collaboration   🎯 IMPORTANT NOTE: WE HIRE PEOPLE, NOT ROLES. If you're excited about this opportunity but don't check every box, we'd love to hear from you. Everyone, no matter how underrepresented, should feel free to apply, as it can only bring learnings or success. If you identify yourself as a woman: Did you know that research shows women often apply only when meeting 100% of requirements? Remember, this is just a guide, not a checklist. We'll be thrilled to receive your application!   🔖 Check out our About Alan and Career pages, as well as our Medium, blog and Glassdoor page for more info.   YOU WANT TO KNOW MORE ABOUT ALAN? 🙌 Perks & Benefits: Alaners are provided with a stimulating environment and perks ensuring they are happy, efficient and spend only high-quality time with co-workers. 🤘A strong culture: People joining Alan are often surprised and delighted by our innovative working method. We have a set of cultural values that guide our approach to work

Job Title: Security Lead Department: Operations Job Region: Oregon / SW Washington Reports-To: Store Operations Manager  Exemption Status (typically): Non-Exempt Requirements: As a retail grocer, we operate 7 days/week and 365 days/year. Our in-store positions are likely to include evening and weekend shifts per the needs of the business. Must complete and maintain any required food and work safety trainings/certifications. Be of good moral fitness as determined by a criminal background check, Oregon Department of Public Safety investigation or other reliable sources.     About the role: Responsible for retail asset protection and security. Responsible for creating a safe and secure store environment by addressing issues and situations that impact the safety and security of customers and staff. Utilizes a diverse set of strategies to de-escalate escalated incidents and engage with known or potential shoplifters. Accurately documents and reports on incidents.    General Requirements: * Engages the customer in a friendly manner by seeking opportunities to exceed customer expectations and enhance the customer experience. * Works a schedule that is informed by the needs of the business and may be subject to change seasonally or due to varying staffing needs and demonstrates reliable and predictable attendance, in accordance with attendance policy and all applicable laws. * Shifts tasks as priorities and circumstances change based on needs and conditions of department and whole store as needed. * Demonstrates a solutions-oriented approach to problems or concerns. * Represents company values. Demonstrates commitment to valuing diversity and contributing to an inclusive working and learning environment. Works cooperatively and positively with fellow team members, customers and vendors spiriting a respectful workplace where everyone is welcome. * Gives and receives feedback in a constructive manner demonstrating company “Speak Up & Listen” culture. Responds to feedback in order to improve performance. * Conserves company resources. Works in a manner consistent with company mission, vision and values and sustainability program. * Adheres to work and food safety policies set forth by the company and all local, state and federal regulatory agencies. Contributes to store cleanliness, maintains equipment. Informs store/department management of any problems. * Observes all company rules and policies. Understands and complies with specific department or location guidelines, tasks and responsibilities. * Demonstrates sound judgment and decision-making in completing job-related tasks, in behaviors in the workplace, and in interactions with co-workers, customers, and the community. * Consistently utilizes the DEI lens in work tasks and when working with other teams and stakeholders. Position Responsibilities: * Responsible for identifying, monitoring and addressing situations that impact the safety and security of customers and staff. * Accurately reports on and documents in-store incidents for internal reporting and potential criminal proceedings. * Responsible for observing store activities of customers and vendors, with the intent to provide an environment that is safe from theft or other potentially harmful situations. * Functions as the store’s primary deterrent to safety, security, and asset protection issues through proactive visibility and engagement. * Demonstrates good judgement and utilizes a diverse set of strategies to de-escalate escalated incidents and engage with known or potential shoplifters. * Maintains a calm and collected demeanour and direct communication style during high-conflict interactions. * Work with internal stakeholders to develop and advise on security and asset protection strategies (e.g. camera placement, standards of approach for chronic offenders, department standards to mitigate loss). * Leads approach and strategy to address organized retail crime at store location in conjunction with store support security team, operations team, law enforcement, and third-party security. * Advises on and investigates need for capital expenditures that support safety and security of the building (e.g. access, camera system upgrades, etc.). * Supporting liaison with law enforcement and local prosecutors for in-store incidents. May provide testimony in criminal procedures as needed. * Leaves apprehension duties to qualified authorities (such as police or third-party security). * Primary collaborator with third-party security – directs actions and support of third-party security in the moment. * Adheres to all company security policies and procedures, including reporting and documentation requirements. * Tools and Equipment Used (not all inclusive): This position may be required to use the following tools and equipment: baler, hand truck, POS, industrial kitchen equipment (i.e. blast chiller, grill, knives/blades, oven, grills, scales, etc.), basic housekeeping / janitorial and standard office equipment. * This position works at a *light level. Required frequently and up to continuously to be on feet with a mix of standing and walking throughout shift. Sitting seldom required. Up to occasionally, dependent on location, required to climb stairs, step stool and /or ladders. * Frequently required to use hands and wrists for grabbing, twisting and pulling. * Performs other tasks and duties as assigned. *Light means the worker has the ability to occasionally (1 – 33%) lift 20 pounds and can frequently (34 – 66%) lift or carry objects weighing up to 10 pounds.   What you Bring as a Candidate:  * Must be at least 18 years of age. * Minimum of 3 years of prior security, safety or related industry experience required. * Be of good moral fitness as determined by a criminal background check, Oregon Department of Public Safety investigation or other reliable sources. * Demonstrated commitment to valuing diversity and contributing to an inclusive working and learning environment * Ability to exercise good judgment at all times and make effective decisions under pressure. * Skill set to engage in escalated interactions.   Physical and Environmental Work Space: Work occurs in a grocery store environment which includes surfaces that can be wet and slippery, depending on location may have stairs or elevators, moderate noise level, and temperature extremes in controlled environments in the cooler and freezer, and depending on location, working outside in all temperatures. There may be exposure to certain allergens and / or chemicals. In accordance with the Americans with Disabilities Act, the ADA Amendments Act of 2008, and other applicable state or local law, we will offer reasonable accommodations to qualified applicants and employees with disabilities.   This job description is not meant to be an all-inclusive list of duties, responsibilities and requirements, but constitutes a general definition of the position's scope and function within our company. New Seasons Market reserves the right to amend and change duties, responsibilities, and requirements to meet changing industry or business needs as necessary.