Senior Security Engineer - GRC

Hi, we’re Back Market.

We’re here to help make tech reliable, affordable, and better than new. We're a global marketplace for refurbished devices, helping lower our collective environmental impact by providing trustworthy, affordable tech with 92% less carbon emissions than new.

Yep, you read that right. Turns out refurbished tech is way better for the planet than new. In fact, With every device purchased on Back Market, our positive impact on the planet grows. From our Customer Care representatives to our software engineer, every individual at Back Market cuts the planet — and consumers — a break. Our mission is simple: to do more with what we already have.

Are you ready to join us? 

Named one of the World's Most Innovative Companies by Fast Company in 2019 and again in 2021, our mission is simple: empowering people to consume tech sustainably by offering folks a high quality, accessible, and more eco-friendly alternative to buying new electronics. Why? Refurbished tech helps lower our collective environmental impact. We have indeed contributed to avoid the production of more than 1,000,000 tons of CO2e worldwide since our launch in 2014.

Be part of an exciting and growing international adventure that will change the way the world consumes tech.

As Senior Security Engineer GRC you will join the Governance, Risks and Compliance (GRC) Squad within the CyberSecurity Tribe.

Our GRC squad is responsible for identifying and mitigating cyber and privacy risks, ensuring compliance with laws and standards (specifically ISO 27001, PCI-DSS, GDPR, CCPA, AI Act, NIS2) that guide Back Market's operations and decision-making processes.

Being a domain expert and evangelist of cybersecurity and privacy best practices you will :

• Drive multiple cybersecurity and privacy initiatives to achieve our compliance and security goals by collaborating with Engineering, Legal, Product, and Business teamsInfluence decision-making on new third-party partnerships, perform risk assessments on strategic projects or features, and offer expert guidance on security and privacy to educate and empower your colleagues and stakeholders.
• Provide support within the CyberSecurity tribe on technical security projects making sure we comply with our internal security and privacy policies.
• Contribute actively to the development and execution of our cybersecurity and privacy awareness strategy.

What we’re looking for:

• You are a talented engineer with at least 5 years experience of working on security or compliance programs, leading cybersecurity projects and ensuring the proper implementation of security best practices
• You believe in the importance of a risk-based approach to define and maintain security objectives, policies, procedures and action plans necessary for succeeding in your mission
• You care about explaining the rationales for the company's security choices, to ensure that colleagues understand and adopt them
• For you, defining a security requirement without proper analysis or foundation is a non-sense
• You master some best practices and standards such as the ISO/IEC 27000 series, including ISO 27001, 27005 or EBIOS RM
• You are curious, structured and enjoy exploring new methods and technologies. You are transparent in your communication and are able to find solutions with your team and your stakeholders when you don’t have an answer
• You like to share knowledge and make your colleagues aware of good cybersecurity practices, by supporting your proposals with concrete examples and demonstrations
• In-depth knowledge of PCI-DSS and GDPR would be appreciated
• Great English verbal and written communication skills

Recruitment Process :

• Call with Yann, our Tech Talent partner
• Meeting with Quentin & Thomas for deep dive on your past experience
• Team fit interview with Gwendal (Head of Cybersecurity & IT) and one engineer from the SecOps team
• BM Value interview

WHY SHOULD YOU JOIN US ? ✌🏼

At Back Market, we’re committed to hiring and supporting diverse teams of people from all backgrounds, experiences, and perspectives — it’s one of the reasons we’re such a high-scoring certified B Corp company (93.2).

No matter your role and seniority level, you’ll enjoy impact-driven work with hands-on career development in an innovative, driven, and fast-paced environment — with benefits to match, like: 

- A mission driven work environment where your day to day makes an impact on the planet. Seriously.

- Hybrid work environment, with 2 remote days a week and 1 remote work week per quarter, plus 3 flex days. 

- Employee Resource Groups, including mentorship programs, comprehensive accessibility policies, and cultural competency training. 

At Back Market, we strive to create a workplace that embodies the world we’re trying to change. We’ve embedded our diversity, equity, and inclusion principles into our DNA — from dedicated staff to employee resource groups to our company values. 

We know that the perfect background for a role doesn’t mean the perfect fit — we encourage you to apply for a role even if you think you may not have all the qualifications. 

If reasonable accommodations are needed for the interview process, please do not hesitate to discuss this with the Talent Acquisition Team.