GRC Automation & Compliance Engineer

Mistral; Paris; Hybride; EUR 70 000 - 100 000; Plein temps

Avantages offerts par ce poste

Benefits package

Résumé du poste

Mistral is seeking a GRC Engineer to design, implement, and maintain governance, risk, and compliance frameworks across hybrid environments. You will automate compliance processes, monitor risks, and enforce governance policies with cross-functional teams to ensure regulatory alignment.

The role emphasizes automating workflows, dashboards, and evidence collection, while integrating GRC tools with SIEM, IAM, and vulnerability management for real-time risk visibility and streamlined audits.

Qualifications

• 5+ years in GRC, IT audit, cybersecurity or related field.
• Hands-on experience with GRC tools.
• Deep knowledge of compliance frameworks (ISO 27001, SOC 2, NIST CSF, COBIT, GDPR, NIS2, HIPAA).
• Proficiency in scripting and automation to streamline GRC processes.
• Strong understanding of IT controls, risk assessment methodologies, and security best practices.
• Experience with SIEM, IAM, or vulnerability management tools.
• Familiarity with cloud security and compliance (AWS/Azure/GCP).
• Ability to analyze complex data and derive actionable insights.
• Creative, pragmatic approach to GRC challenges and rigorous documentation.
• Excellent cross-functional collaboration and clear communication.
• Certifications such as CISSP, CISM, CRISC, CISA, ISO 27001 Lead Auditor/Implementer.

Responsabilités

• Automate GRC workflows to streamline monitoring, risk assessments, and testing.
• Integrate GRC tools with SIEM, IAM, and ticketing systems for real-time risk visibility.
• Develop dashboards and reports showing compliance status and control effectiveness.
• Automate control testing and validation to improve accuracy and reduce manual effort.
• Enforce policy-as-code across cloud and on-prem environments.
• Automate risk assessments by integrating vulnerability scanners with GRC platforms.
• Streamline audit evidence collection for internal and external audits.
• Implement continuous compliance monitoring with alerts for non-compliance events.
• Automate third-party risk management, including vendor questionnaires and scoring.
• Enhance incident response with automation and collaboration with Security teams.
• Maintain and optimize GRC tools for scalability and performance.

Outils

SIEM

IAM

Vulnerability management tools

GRC tools

Scripting & automation

IT controls

Description du poste

Mistral is seeking a GRC Engineer to design, implement, and maintain governance, risk, and compliance frameworks across hybrid environments. You will automate compliance processes, monitor risks, and enforce governance policies with cross-functional teams to ensure regulatory alignment.

The role emphasizes automating workflows, dashboards, and evidence collection, while integrating GRC tools with SIEM, IAM, and vulnerability management for real-time risk visibility and streamlined audits.