Manager Sécurité Applicative Senior (H/F)

About Mirakl:   Founded in 2012, Mirakl has been at the forefront of marketplace innovation, empowering every business to compete in the platform economy. Today, Mirakl’s operating system combines an enterprise marketplace solution (Mirakl Platform) that enables retailers and B2B organizations to launch, scale, and operate marketplaces and dropship, AI-powered multichannel selling (Mirakl Connect), retail media (Mirakl Ads) and an agentic commerce infrastructure (Mirakl Nexus). With dual headquarters in Boston and Paris, Mirakl helps a global ecosystem of 450+ marketplaces (B2C and B2B) and a network of over 100k third-party marketplace sellers. Brands like Macy’s, Decathlon, Carrefour, Asos, and Airbus Helicopters use Mirakl to grow their businesses in new and remarkable ways.   For more information, visit www.mirakl.com.   Mirakl in Numbers: * 🗓️ Founded in 2012 | Member of French Tech Next40 * 👥 750+ employees in 9 offices worldwide: Paris, Barcelona, Bordeaux, Boston, London, Munich, New York, Sydney, Tokyo   Our Values: Working at Mirakl means accelerating your career alongside ambitious, passionate, and supportive colleagues. We're proud of the diversity of backgrounds, perspectives, and experiences that make our teams unique.   Our 5 values guide how we collaborate: * 💡 Work Hard Together: Teamwork and collaboration are the foundation of our success * 🏆 Get Things Done:  We prioritize action and efficiency for impactful results * 🚀 Go Above & Beyond:  We tackle challenges proactively and always aim for excellence * 🎓 Succeed Through Expertise: Knowledge sharing and continuous learning are core to our culture * 🤝 Satisfy & Empower Clients: We're committed to our clients' success   THE TEAM YOU'LL JOIN You'll be part of our Security team within the Platform, Data & AI Security pillar, led by Maxime Lahaye, Senior Security Officer, based in Paris. AI is fundamentally transforming how we work, and you'll join a team at the forefront of this evolution. This is your opportunity to build the GRC infrastructure of tomorrow, where automation, scripting, and security converge to enable Mirakl's next phase of growth. This is a permanent position (CDI) based in Paris or Bordeaux, with 4 days on-site per week.   YOUR IMPACT 1 · COMPLIANCE & CERTIFICATIONS — AUTOMATION-FIRST * Contribute to maintaining Mirakl's ISO 27001, ISO 27018 and SOC 2 certifications, leveraging automated GRC platforms to enable continuous compliance monitoring * Automate evidence collection, control monitoring and documentation workflows using modern GRC tooling, AI-powered agents and scripting (Python, N8N) * Help manage and evolve the ISMS (Information Security Management System), ensuring it reflects both regulatory requirements and Mirakl's evolving AI-driven operations 2 · AI GOVERNANCE  * Co-design and evolve Mirakl's AI usage governance framework: acceptable use policies, data classification for AI inputs, shadow AI detection and AI vendor risk assessment * Maintain a live inventory of AI tools used across the company and contribute to the risk-based process for evaluating and onboarding new tools * Monitor the AI governance regulatory landscape and help adapt Mirakl's framework proactively 3 · SECURITY BY DESIGN ACROSS ALL COMPANY PROJECTS * Partner with Product and Engineering teams early in project lifecycles to embed security and compliance requirements from the start * Participate in risk reviews across product and platform initiatives, with specific attention to AI-related threat vectors (prompt injection, data leakage in LLMs, access control for models)   WHAT YOU'LL BRING TO THE ROLE Experience: * Master's degree (Bac+5) * Minimum 3 years of experience in cybersecurity * You participated in ISO 27001 audit as a security contributor at least * Proven experience in scripting and automation (Python, N8N or equivalent) * Experience in a consulting firm or technology company is a plus * Strong understanding of compliance frameworks and security standards Skills: * Strong technical profile with hands-on experience developing scripts and automating processes * Proactive and autonomous, with strong organizational and problem-solving abilities * Excellent communication skills to engage both technical and non-technical stakeholders * Integrity and ethics as core values * Ability to work collaboratively in cross-functional teams * Experience with web application and cloud (SaaS) security is a plus TOOLS USED * Python * N8N * Drata * AWS, GCP * Office Suite / Google Workspace LANGUAGES * Fluent in French and conversational English OUR HIRING PROCESS 1. 30-40 minute call with a Talent Acquisition Specialist 2. 1-hour technical interview with the hiring manager 3. Two 45-minute values interviews using the STAR methodology The STAR method and structured interviews will hold no secrets for you. We welcome collaborators with their diverse perspectives and experiences to power us forward. These often far exceed conventional job requirements and help us create a culture of continuous learning. If you’re ready to join a global leader powering digital transformation for 450+ of the world’s most innovative retailers and B2B organizations. As part of our recruitment process, Mirakl processes your personal data to review and manage your application and, where appropriate, to consider your profile for future opportunities. You can exercise your data protection rights at any time, and as further detailed in our policies. For more information about how we process your personal data and your rights, please consult our Recruitment Privacy Notice, here in English and here in French.  We may use Artificial Intelligence (AI) solutions to help streamline our hiring process, including screening applications, analyzing resumes, and assessing responses. While AI helps us work efficiently, all final hiring decisions are made by humans. For more information, visit our AI Guidelines for Candidates and Interviews.

ISO New England is seeking an experienced Cyber Security Analyst to support and enhance enterprise cloud, infrastructure, AI, and DevSecOps security initiatives. This role is responsible for proactively identifying vulnerabilities, compliance gaps, misconfigurations, and security risks across enterprise systems, cloud platforms, AI/ML environments, CI/CD pipelines, and regulated CIP environments.   The ideal candidate will have strong experience in cloud security, vulnerability management, DevSecOps, AI security, and security compliance, with the ability to collaborate across technical teams to implement and maintain enterprise security standards.   What we offer you: * A stable, mission-driven workplace where your impact truly matters * A highly engaged work environment that values inclusion, collaboration, and employee safety and wellbeing * Competitive compensation with a base salary + performance bonus * Robust benefits package, including: * Enhanced 401(k) and financial planning support * Tuition reimbursement and professional development * Wellness programs, including an onsite gym * Flexible work hours * Employee Business Networks  * Free coffee at our onsite café * Hybrid work environment (3 days/week onsite) * Distance-based relocation assistance available * 5/6 person paid on-call rotation   How you will make an Impact * Conduct cloud security assessments across AWS and Azure environments, including CSPM, CIEM, IAM, and container security reviews. * Integrate and support security controls within CI/CD pipelines and DevSecOps environments. * Assess and secure AI/ML systems, generative AI applications, and AI-enabled business solutions throughout their lifecycle. * Evaluate risks associated with AI model usage, training data, third-party AI services, and Large Language Model (LLM) integrations. * Implement AI governance controls to protect sensitive data and prevent unauthorized disclosure through AI platforms. * Develop security guardrails for AI adoption, including data classification, access controls, prompt security, and responsible AI usage. * Perform AI threat modeling to identify risks such as prompt injection, data poisoning, model manipulation, model theft, and insecure AI integrations. * Perform vulnerability assessments, configuration reviews, and remediation tracking across enterprise and CIP systems. * Review and validate baseline configurations, logging requirements, and compliance controls. * Evaluate network topology and infrastructure changes to determine CIP impact and SOC visibility requirements. * Partner with application development, cloud platform engineering, infrastructure, enterprise architecture, IAM, network, SOC, and business teams to integrate security into system design, projects, and operational processes. * Support phishing simulations, security awareness initiatives, AI security awareness training, and audit evidence collection. * Provide security recommendations and risk mitigation strategies for cloud, AI, and enterprise environments. * Support and maintain enterprise security platforms including CNAPP, EDR, vulnerability management, SIEM, DSPM, and cloud security monitoring tools. * Monitor evolving AI security risks, industry standards, and regulatory requirements.   What we are looking for * Experience in cybersecurity, cloud security, security engineering, or AI security roles. * Experience with AWS and/or Azure cloud platforms. * Experience with container orchestration technologies including Amazon ECS and Amazon EKS. * Experience implementing security controls within CI/CD and DevSecOps environments. * Knowledge of AI security concepts, including securing generative AI applications, LLMs, AI governance, and AI risk management. * Familiarity with AI threats such as prompt injection, data leakage, model poisoning, model theft, and insecure AI APIs. * Knowledge of vulnerability management, cloud security, IAM, CSPM, and configuration management practices. * Experience with security monitoring and logging platforms. * Familiarity with Terraform, infrastructure-as-code, and policy governance frameworks such as OPA. * Understanding of data governance, data protection, and responsible AI principles. * Strong analytical, troubleshooting, communication, and collaboration skills. * Self-starter with the ability to work independently in a fast-paced environment.   Desired not required * Bachelor’s degree in information technology, Cybersecurity, Computer Science, or related field. * Advanced degree such as a Master’s in Cybersecurity Management, Information Assurance, Artificial Intelligence, or related fields. * Industry cybersecurity, cloud security, and AI security certifications preferred, including: * ISC2 Certified Information Systems Security Professional (CISSP) * ISACA Certified Information Security Manager (CISM) * Amazon Web Services Certified Security – Specialty * Microsoft Azure Security Engineer Associate (AZ-500) * ISC2 Certified in AI Security (when available) * OWASP AI Security and LLM Security knowledge/training   This employer will not sponsor applicants for work visas for this position (ex: H-1B, F-1/CPT/OPT, O-1, E-3, TN, J, etc.).   The expected salary range for this position is $127,000 - $150,000 per year. This role is also eligible for an annual performance bonus, comprehensive health insurance (medical, dental and vision), flexible spending and health savings accounts, a 401(k) plan with generous employer contributions and a student debt benefit, life and AD&D insurance, disability insurance, critical illness and hospital indemnity benefits, paid time off, paid leave, a wellness program, an employee assistance program and other great company perks.   #LI-HYBRID