Compliance Engineer

This is a fully remote position, open to applicants in France.

📋 Description

• Take ownership of the complete compliance lifecycle for eIDAS v2: perform gap analyses, establish remediation roadmaps, oversee implementation, and prepare for certification.

• Align NIS2 obligations with Yousign’s scope, determine the compliance boundaries, and lead the remediation and reporting cycle.

• Oversee and enhance Yousign’s ISO 27001 program: manage the continuous improvement process, coordinate internal audits, and maintain ISMS documentation.

• Act as the main liaison with external auditors, ANSSI, and LSTI: prepare audit documentation, manage communications, and oversee the certification timeline.

• Track the European regulatory environment (ETSI, eIDAS, NIS, PCI DSS, and associated standards), evaluate its impact on Yousign, and convert new requirements into practical compliance initiatives.

• Support the security of the Trusted Zone and aid in fraud detection and prevention alongside the Security & Compliance team.

• Participate in the team's weekly on-call (‘doctor’) rotation, and develop automation (n8n, AI tools, alerting) to minimize manual tasks.

⛳️ Requirements

• Extensive, hands-on experience with at least one technically challenging compliance standard — eIDAS v2, ETSI EN 319 series, PCI DSS, or equivalent.

• Proven experience in conducting gap analyses independently, creating remediation plans, and executing remediation actions directly.

• Clear differentiation between advising on compliance and achieving compliance outcomes.

• Experience in performing internal audits and comprehensive gap analyses.

• Ability to create structured remediation backlogs, meticulously track progress, and prepare audit packages that can withstand external examination.

• Experience in managing or actively engaging in a live ISO 27001 program.

• Experience in ANSSI-qualified or LSTI-accredited environments is highly advantageous.

• Understanding of the NIS2 directive and the capability to foresee its implications for a SaaS organization.

• Ability to define obligations, align them with the business, and construct a readiness roadmap.

• Confidence in representing Yousign to external auditors, ANSSI, and LSTI.

• Proficient in translating intricate regulatory requirements into concise, actionable language for engineering and product teams.

• Comfortable collaborating across different domains and contributing beyond core compliance functions.

• While compliance is your primary focus, you are open to contributing to security operations, fraud detection, and Trusted Zone protection.

• Previous experience in regulated or Digital Trust environments is a definite plus.

• Self-reliant and capable of managing multiple long-term compliance programs concurrently without losing sight of dependencies or deadlines.

• Comfortable working with minimal oversight in a rapidly evolving scale-up environment.

• Pragmatic: prioritize remediation actions based on business impact and risk, applying the appropriate level of rigor for the company's size and stage.

• Utilize AI and automation to enhance compliance and security tasks across the team perimeter — regulatory monitoring, control tracking, audit preparation, reporting — and develop scalable workflows instead of one-off solutions.

• Fluent in French at a native or near-native level (C2) is mandatory.

• Proficient in English at a professional working level (B2) is necessary for reading and working with ETSI standards, eIDAS regulation, NIS2 directive, and international compliance frameworks.

🏝️ Benefits

• Stock options - BSPCE

• Meal vouchers (Swile): €10.50/day, with 50% covered by Yousign

• Health insurance (Alan): 50% funded by Yousign

• Life & disability insurance: fully covered by the employer

• Wellbeing support: Axomove (4 physiotherapy sessions) and Moka.care (6 therapy/coaching sessions)

• Transportation: 50% reimbursement for public transport for hybrid workers

• Leeto: access to a variety of employee discounts

• Time off: 10 RTT days/year, plus menstrual leave, parental benefits, seniority days, 1 volunteering day/year, a learning & development budget, and more