Information Security Apprentice

Didomi helps organizations collect, store, and leverage user choices across multiple channels, increasing precision in marketing and advertising operations and building trust through transparent data practices. Through a comprehensive software platform and premium support services, Didomi enables large corporations to optimize the collection and activation of user choice data, monitor vendor and tracker activity, and reduce compliance risk under global privacy regulations. Following the 2025 acquisitions of Addingwell and Sourcepoint, Didomi has strengthened its end-to-end capabilities across consent, preferences, and data activation, bringing together server-side tagging and privacy technology to deliver experiences that improve performance, trust, and loyalty. Active in 35 countries, Didomi supports over 2,000 clients across various sectors, including some of the world's largest corporations, in building revenue-driving operations based on reliable and robust user choice data. For more information, please visit www.didomi.io About the apprenticeship We are looking for an Information Security Analyst apprentice to join our Security & IT team. This is a work-study position (contrat d'apprentissage) for a student in cybersecurity, information systems, or a related field, who wants to learn how security actually works inside a fast-growing B2B SaaS company.

oud and identity security, vulnerability management, awareness, and compliance. Compliance is part of the job, not the whole job. You will report to the Security & IT Manager, who will also be your tutor (maître d'apprentissage) throughout the contract. What you will learn and do Security operations Take part in the recurring activities on the security calendar: vulnerability scanning campaigns, quarterly access reviews, business continuity tests, and policy review cycles. Triage security and vulnerability findings from AWS (GuardDuty, Inspector, Security Hub), CrowdStrike Falcon, and other sources, learn to prioritize them, and follow remediation through to closure with the engineering teams. Help monitor and respond to security alerts and incidents, including endpoint detections in CrowdStrike Falcon, and contribute to incident documentation and post-incident reviews. Support endpoint security through our device management platform (JAMF) and our EDR (CrowdStrike Falcon), and help keep device baselines healthy. Cloud, identity, and access Learn how identity and access management works at Didomi (Google Workspace, SSO, MFA) and help keep it tight. Run periodic access reviews across critical systems (Google Workspace, AWS, Slack, JAMF, GitLab, GitHub, and internal applications) and surface findings to the team. Help harden internal workflows around access, data handling, and SaaS usage. ISO 27001, HIPAA, and audit readiness Help maintain our ISO 27001 management system: keep