Compliance Analyst

Responsibilities

• Contribute to drafting, updating and implementing internal compliance policies and procedures.
• Ensure the company’s compliance with applicable regulations (GDPR, DORA, AI Act, Sapin II Law, BRRD II, OCIR, etc.).
• Implement and oversee GDPR requirements: conduct and maintain DPIAs for high‑risk processing activities.
• Maintain and complete the records of processing activities.
• Establish and manage the personal data breach notification process.
• Handle data subject rights requests.
• Contribute to implementing DORA requirements: participate in the ICT risk management framework and associated governance.
• Assess risks related to critical third‑party providers and monitor continuous supplier oversight.
• Contribute to the preparation and reporting of major incidents to the competent authorities.
• Ensure regulatory compliance of outsourced activities and supplier contracts (GDPR clauses, DORA requirements, etc.) in coordination with Finance and Procurement teams.
• Support business teams, notably HR, Finance and Procurement, in integrating regulatory requirements into their projects and activities.
• Identify non‑compliance risks, feed and maintain the company risk mapping.
• Lead remediation plans and risk mitigation actions.
• Define, implement and oversee the continuous compliance control framework.
• Train and raise employee awareness on compliance issues (GDPR, anti‑corruption framework, etc.).
• Contribute to structuring and improving the business continuity and crisis management arrangements.
• Prepare regular reporting and keep documentation up to date for internal and external audits.

Requirements

• Engineering degree - Master’s level (Bac+5) with a specialization in risk management or equivalent from a specialized school
• At least 5 years’ experience in risk management and compliance, ideally in a tech environment (fintech, startup, scale‑up)
• Fluent French (C2), Professional English (B2‑C1)