Security Compliance, GRC Engineer

Mistral.ai · Parissenior

En corto

▸Ingeniero de GRC que automatiza cumplimiento y gestión de riesgos en IA, integrando herramientas de seguridad.
▸Día a día: automatiza auditorías, dashboards, pruebas de controles y gestión de riesgos de terceros con scripting y sistemas integrados.
▸Lo destacado: trabajas directamente en sistemas de IA avanzada con marcos de cumplimiento críticos (GDPR, SOC 2, NIS2) en entornos empresariales de alto impacto

Experiencia en entornos internacionales y trabajo colaborativo requiere inglés fluido.

En ~1 minuto te damos: quién te entrevista, las preguntas probables con respuestas desde tu CV, y tu CV adaptado a esta vacante. Gratis, sin tarjeta.

🎧¿Llegás a la entrevista? Llevá el copiloto. Nuestra extensión escucha la entrevista en vivo y te muestra anclas de 3-4 palabras desde tu CV y tu preparación — mirás, conectás, hablás. Gratis. Ver la extensión →

¿Qué piden?

✓5+ años en GRC, ciberseguridad o auditoría IT
✓Experiencia práctica con herramientas GRC
✓Conocimiento profundo de ISO 27001, SOC 2, NIST CSF, GDPR, NIS2, HIPAA
✓Habilidades en scripting y automatización
✓Experiencia con SIEM, IAM o gestión de vulnerabilidades
✓Familiaridad con seguridad y cumplimiento en entornos en la nube

¿No cumplís todo? Es lo normal — tu dossier gratis te dice qué gaps tenés y cómo cubrirlos en la entrevista.

GRC platformsSIEMIAMticketing toolsvulnerability scanning toolscloud environmentsscriptingpolicy-as-codeconfiguration managementaudit evidence automation

¿A quién escribirle en Mistral.ai?

Tu dossier gratis identifica a las personas que te entrevistarían — con su background, qué valoran y cómo escribirles para destacar antes de aplicar.

About Mistral Mistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems—across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector—co-creating customized AI systems that they can run on their terms. We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited. Role Summary As a GRC Engineer , you will be at the heart of Mistral’s Governance, Risk, and Compliance (GRC) program. You will design, implement, and maintain the technical and operational frameworks that ensure our organization meets its regulatory, security, and risk management obligations. Your role will involve collaborating with cross-functional teams to automate compliance processes, monitor risks, and enforce governance policies. You will play a key role in ensuring that our systems, processes, and controls align with industry standards and regulatory requirements. What you will do Automate GRC workflows : Design, develop, and deploy automation scripts and tools to streamline compliance monitoring, evidence collection, risk assessments, and control testing. , SIEM, IAM, or ticketing tools) to enable real-time risk and compliance monitoring. Develop custom dashboards and reports : Create automated dashboards to provide real-time visibility into compliance status, risk exposure, and control effectiveness for stakeholders. , access reviews, patch management, or configuration compliance) to reduce manual effort and improve accuracy. Enforce policy-as-code : Embed compliance and security policies directly into cloud and on-premise environments, ensuring consistent enforcement across systems. Automate risk assessments : Develop workflows to automate the identification and prioritization of risks, such as integrating vulnerability scanning tools with GRC platforms to flag high-risk assets automatically. , logs, configuration files, or access records) to support internal and external audits, reducing preparation time and minimizing errors. , unauthorized access, misconfigurations, or policy violations) Automate third-party risk management : Build workflows to automate vendor risk assessments, including sending questionnaires, scoring responses, and escalating high-risk vendors for review. Enhance incident response with automation : Collaborate with Security teams to automate incident response processes, such as triggering remediation workflows for identified risks or compliance gaps. , user access reviews, control attestations) and enhancing their scalability and performance. About you 5+ years in Governance, Risk, and Compliance (GRC), IT audit, cybersecurity, or a related field. Hands-on experience with GRC tools. Deep knowledge of compliance frameworks such as ISO 27001, SOC 2, NIST CSF, COBIT, or regulatory requirements like GDPR, NIS2, or HIPAA. Proficiency in scripting and automation to streamline GRC processes. Strong understanding of IT controls , risk assessment methodologies, and security best practices. Experience with SIEM, IAM, or vulnerability management tools .

No apliques sin prepararte

Investigamos quién te entrevista, adaptamos tu CV y te ensayamos en vivo — gratis la primera.