Senior Third-Party Risk Specialist

Mistral.ai · Parissenior

En corto

▸Especialista senior en gestión de riesgos de terceros en una empresa de IA de vanguardia.
▸Diariamente evalúas proveedores, auditas cumplimiento con normas como GDPR, NIS2, DORA y estás integrado en equipos legales, de seguridad y compras.
▸Destaca que trabajas en una empresa de IA que construye sistemas personalizados para sectores críticos como salud, defensa y finanzas.

Excellent written and verbal communication skills.

En ~1 minuto te damos: quién te entrevista, las preguntas probables con respuestas desde tu CV, y tu CV adaptado a esta vacante. Gratis, sin tarjeta.

🎧¿Llegás a la entrevista? Llevá el copiloto. Nuestra extensión escucha la entrevista en vivo y te muestra anclas de 3-4 palabras desde tu CV y tu preparación — mirás, conectás, hablás. Gratis. Ver la extensión →

¿Qué piden?

✓7+ años en gestión de riesgos de terceros, ciberseguridad o cumplimiento.
✓Experiencia con auditorías, certificaciones y programas de cumplimiento.
✓Conocimiento práctico de ISO 27001, SOC 2, NIS2, DORA, GDPR y NIST SP 800-53.
✓Habilidad para evaluar riesgos usando metodologías como EBIOS RM o ISO 27005.
✓Capacidad para redactar y negociar cláusulas contractuales de seguridad y cumplimiento.
✓Habilidades de comunicación y coordinación con múltiples áreas (Legal, Seguridad, Compras, Operaciones).

¿No cumplís todo? Es lo normal — tu dossier gratis te dice qué gaps tenés y cómo cubrirlos en la entrevista.

ISO 27001SOC 2NIS2DORAGDPRNIST SP 800-53ISO 27005EBIOS RMCyber Resilience ActLPM

¿A quién escribirle en Mistral.ai?

Tu dossier gratis identifica a las personas que te entrevistarían — con su background, qué valoran y cómo escribirles para destacar antes de aplicar.

About Mistral Mistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems—across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector—co-creating customized AI systems that they can run on their terms. We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited. Role summary As a Senior Third-Party Risk Specialist , you will be responsible for identifying, assessing, and mitigating risks associated with third parties (vendors, partners, subcontractors, etc.) at Mistral. You will play a pivotal role in safeguarding our assets, data, and reputation by ensuring that our third-party relationships adhere to the highest standards of security, compliance, and resilience. You will work closely with Legal, Procurement, Security, and Operational teams to embed a proactive third-party risk management approach into our business processes. ). , GDPR, NIS2, DORA). Collaborate with internal teams : Work with Procurement, Legal, Security, and Operations teams to integrate third-party risk requirements into vendor selection, negotiation, and monitoring processes. Manage incidents and non-compliance : Identify and address gaps or incidents related to third parties, coordinating corrective actions and ensuring follow-up until resolution. Raise awareness and train stakeholders : Develop and deliver training and guidance to educate internal teams on third-party risk issues and their responsibilities. Maintain robust documentation : Document assessments, decisions, and actions related to third-party risk management, ensuring traceability for internal and external audits. , ISO 27001, SOC 2, ISO 27036) impacting third-party risk management, and propose adjustments to the internal framework. , third-party risk management platforms) and methodologies to enhance the program's effectiveness. Align with broader resilience strategy : Ensure the third-party risk management program supports the company's overall cybersecurity and compliance objectives. Contract redlining and negotiation skills : Ability to review, edit, and negotiate contractual terms to align with security and compliance requirements. About you 7+ years in third-party risk management, cybersecurity compliance, information security governance, or a related field. Experience supporting cybersecurity compliance programs, certification processes, or external audits. Practical knowledge of standards and frameworks such as ISO 27001, SOC 2, NIST SP 800-53, or regulations like NIS2, DORA, GDPR. , EBIOS RM, ISO 27005). Familiarity with cybersecurity regulations such as NIS2, the Cyber Resilience Act, LPM, or DORA. Strong organizational skills and attention to detail, with the ability to manage documentation and coordinate multiple stakeholders. Excellent written and verbal communication skills. Strong analytical and problem-solving abilities.

No apliques sin prepararte

Investigamos quién te entrevista, adaptamos tu CV y te ensayamos en vivo — gratis la primera.