Security Compliance, GRC Engineer

Mistral.ai · Parissenior

In short

▸Ingeniero de GRC que automatiza cumplimiento y gestión de riesgos en IA, integrando herramientas de seguridad.
▸Día a día: automatiza auditorías, dashboards, pruebas de controles y gestión de riesgos de terceros con scripting y sistemas integrados.
▸Lo destacado: trabajas directamente en sistemas de IA avanzada con marcos de cumplimiento críticos (GDPR, SOC 2, NIS2) en entornos empresariales de alto impacto

Experiencia en entornos internacionales y trabajo colaborativo requiere inglés fluido.

In ~1 minute you get: who interviews you, the likely questions answered from your CV, and your CV tailored to this job. Free, no card.

🎧Land the interview? Bring the copilot. Our free extension listens to the live interview and flashes 3-4-word anchors from your resume and prep — glance, connect, talk. Get the extension →

What they ask for

✓5+ años en GRC, ciberseguridad o auditoría IT
✓Experiencia práctica con herramientas GRC
✓Conocimiento profundo de ISO 27001, SOC 2, NIST CSF, GDPR, NIS2, HIPAA
✓Habilidades en scripting y automatización
✓Experiencia con SIEM, IAM o gestión de vulnerabilidades
✓Familiaridad con seguridad y cumplimiento en entornos en la nube

Don't tick every box? That's normal — your free dossier shows your gaps and how to cover them in the interview.

GRC platformsSIEMIAMticketing toolsvulnerability scanning toolscloud environmentsscriptingpolicy-as-codeconfiguration managementaudit evidence automation

Who should you write to at Mistral.ai?

Your free dossier identifies the people who'd interview you — their background, what they value, and how to reach out so you stand out before applying.

About Mistral Mistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems—across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector—co-creating customized AI systems that they can run on their terms. We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited. Role Summary As a GRC Engineer , you will be at the heart of Mistral’s Governance, Risk, and Compliance (GRC) program. You will design, implement, and maintain the technical and operational frameworks that ensure our organization meets its regulatory, security, and risk management obligations. Your role will involve collaborating with cross-functional teams to automate compliance processes, monitor risks, and enforce governance policies. You will play a key role in ensuring that our systems, processes, and controls align with industry standards and regulatory requirements. What you will do Automate GRC workflows : Design, develop, and deploy automation scripts and tools to streamline compliance monitoring, evidence collection, risk assessments, and control testing. , SIEM, IAM, or ticketing tools) to enable real-time risk and compliance monitoring. Develop custom dashboards and reports : Create automated dashboards to provide real-time visibility into compliance status, risk exposure, and control effectiveness for stakeholders. , access reviews, patch management, or configuration compliance) to reduce manual effort and improve accuracy. Enforce policy-as-code : Embed compliance and security policies directly into cloud and on-premise environments, ensuring consistent enforcement across systems. Automate risk assessments : Develop workflows to automate the identification and prioritization of risks, such as integrating vulnerability scanning tools with GRC platforms to flag high-risk assets automatically. , logs, configuration files, or access records) to support internal and external audits, reducing preparation time and minimizing errors. , unauthorized access, misconfigurations, or policy violations) Automate third-party risk management : Build workflows to automate vendor risk assessments, including sending questionnaires, scoring responses, and escalating high-risk vendors for review. Enhance incident response with automation : Collaborate with Security teams to automate incident response processes, such as triggering remediation workflows for identified risks or compliance gaps. , user access reviews, control attestations) and enhancing their scalability and performance. About you 5+ years in Governance, Risk, and Compliance (GRC), IT audit, cybersecurity, or a related field. Hands-on experience with GRC tools. Deep knowledge of compliance frameworks such as ISO 27001, SOC 2, NIST CSF, COBIT, or regulatory requirements like GDPR, NIS2, or HIPAA. Proficiency in scripting and automation to streamline GRC processes. Strong understanding of IT controls , risk assessment methodologies, and security best practices. Experience with SIEM, IAM, or vulnerability management tools .

Don't apply unprepared

We research who's interviewing you, tailor your CV and rehearse you live — first one free.