🌐 Security & Legal Specialist - Customer Care

HEALTH CAN’T WAIT. Not for symptoms to get worse. Not for a six‑month appointment. Not for a system to catch up. But that’s exactly how healthcare works today. You wait, until you can’t. Alan exists to end the wait. Health is a universal right, and we believe this right can only become real when it’s coupled with prevention. We need to stop treating health as something we repair and start treating it as something we build, every day. It’s not solely a question of willpower. It’s the healthcare system itself that needs to work for everyone, in a sustainable way. So we are building the new standard in prevention insurance. Alan is the first company that integrates insurance, prevention, and care into a single, acclaimed user experience. We are on an incredible journey to build a global leading company, with a unique culture https://alan.com/en/careers. We already partner with 40K+ companies of all sizes, serving more than 1M+ members, and have reached €800M+ in ARR. Prevention as the new norm. That's what we're building with our team of 800+ people. If it speaks to you: we're hiring across France, Spain, Belgium, and Canada. And beyond. 🚀 THE CHALLENGE - Alan is a leading European health insurer with over 1 million members across 4 countries (France, Belgium, Spain, Canada). At its core, Alan is a tech company that believes exceptional member experience is a competitive advantage: fast, empathetic, and reliable service at scale. As of Q1 2026, 40% of conversations are handled automatically. - At the intersection of Care, Legal, Security, and Data Protection sits a set of topics that are as operationally complex as they are strategically critical: data breaches, GDPR rights requests, security incidents, legal complaints, regulatory reporting. - We are looking for a Care Legal & Security Specialist to own these topics end-to-end: handling complex cases in close collaboration with Alan's Legal and DPO teams, building the processes and training that allow our ~300 Care agents to manage them with confidence, and identifying where AI and automation can reduce manual load. As Alan accelerates across four countries, what you build in France gets replicated in Spain, Belgium, and Canada: your work doesn't stay local. - This is not a pure legal role, and it is not a pure ops role. You handle regulatory cases, improve the processes that prevent them from recurring, and scale what works across countries. You will be embedded within our Operational Excellence team, working in close collaboration with Care Ops and the Corporate Unit. 👨‍🚀 MISSIONS 1/ Operational run - Handle complex security incidents, GDPR cases, and legal complaints escalated from Care agents, including CNIL notifications (drafted in close collaboration with Legal and DPO, within the 72-hour regulatory deadline), account takeover situations, Level 2 and Level 3 complaints, and incoming legal mail - Manage interactions with external stakeholders (CNIL, Insurance Ombudsman, Signal Conso) with precision and within regulatory deadlines - Own KPI monitoring and reporting for legal and security matters; organize yearly complaints reporting for Alan's Board; identify trends and escalate systemic issues to Product teams early 2/ Scalability: process, tools, and training - Design and continuously improve workflows, escalation paths, macros, and help center content so Care agents can handle legal and security cases autonomously at L1 and L2 - Identify simplification and automation opportunities across legal and security operations, then collaborate with Care Ops and Product crews to deploy them, rather than solving each case manually - Build and maintain training materials (case studies, Q&As, simulations), so Care Experts develop real judgment, not just process familiarity - Ensure regulatory training completion across the team 3/ Globalization - Translate processes, frameworks, and