Security Lead

Not for symptoms to get worse. Not for a six‑month appointment. Not for a system to catch up. But that’s exactly how healthcare works today. You wait, until you can’t.

Alan exists to end the wait.

Health is a universal right, and we believe this right can only become real when it’s coupled with prevention. We need to stop treating health as something we repair and start treating it as something we build, every day. It’s not solely a question of willpower. It’s the healthcare system itself that needs to work for everyone, in a sustainable way.

So we are building the new standard in prevention insurance. Alan is the first company that integrates insurance, prevention, and care into a single, acclaimed user experience.

We are on an incredible journey to build a global leading company, with a unique culture. We already partner with 40K+ companies of all sizes, serving more than 1M+ members, and have reached €800M+ in ARR.

Prevention as the new norm. That's what we're building with our team of 800+ people. If it speaks to you: we're hiring across France, Spain, Belgium, and Canada. And beyond.

Alan is no longer the company it was in 2020. We are now an insurance group celebrating its 10th birthday, operating across 4 countries and growing fast – handling sensitive health data for 1M+ members, operating under DORA and HDS certification requirements, and regulated by the ACPR.

To match that scale, we are opening an external search for a Security Lead for the team's next phase: someone who brings structure, vision, and people leadership to a team that already has serious technical firepower.

1. Lead the security team and the topic

2. Own security in the AI era

3. Scale across 10+ countries

4. Build and evolve Alan's security strategy

• Security as a business asset: You see security as a long-term defensive asset and a trust-builder for members, regulators, and partners, not a cost centre.

• Influences without authority: You align Legal, DPO, Risk, Engineering, Product, and Operations on security requirements without creating blockers or adversarial dynamics. People come to you early because you make their lives easier, not harder.

• Communicates risk to non-technical audiences: You can brief a board or executive committee and make them feel informed, not overwhelmed. You know the difference between a board-level finding and a quarterly report item.

• Builds security culture, not compliance theatre: Your awareness programmes land because they are relevant and well-designed, not because they are mandatory. The goal is teams making better decisions, not teams checking boxes.

• Thrives in a distributed, written culture: You are comfortable with async communication, written-first thinking, and working across countries and time zones without needing constant synchronisation.

1. Built the security team with clarity, structure, and direction (includes defining Alan’s security vision, how Security interfaces with the rest of the company, capacity planning, talent density, hiring plans, etc.)

2. Shaped how Alan uses AI for security: build an AI security posture that is both rigorous and an accelerator for the team

3. Maintained and evolved Alan's compliance backbone across ISO 27001, HDS, DORA, and defined a playbook to ensure consistency across 10+ countries

4. Built a living security risk programme that feeds into business and engineering decisions

5. Confirmed Alan as a trusted, security-first company in the eyes of regulators, partners, and members

This position targets level F+ on our level grid.