GRC Automation Engineer: Drive Compliance & Risk Monitoring

Mistral Ai; Paris; Sur place; EUR 90 000 - 120 000; Plein temps

Avantages offerts par ce poste

Healthcare coverage

Parental leave

Relocation support

Wellness programs

Meal and transportation allowances

Résumé du poste

Mistral AI is seeking a GRC Engineer to lead governance, risk and compliance initiatives across our AI platforms in France. You will design and automate frameworks, integrate GRC tools with SIEM/IAM, and deliver real-time dashboards that show risk exposure and control effectiveness.

In this role you will automate audits, enforce policy-as-code, and collaborate with IT, security, legal and business units. French proficiency is a plus; English is required for global collaboration.

Qualifications

• 5+ years in GRC, IT audit, cybersecurity, or related field.
• Hands-on experience with GRC tools.
• Deep knowledge of ISO 27001, SOC 2, NIST CSF, COBIT, GDPR/NIS2/HIPAA.
• Proficiency in scripting and automation.
• Strong IT controls and risk assessment methodologies.
• Experience with SIEM, IAM, or vulnerability management tools.
• Familiarity with cloud security and compliance (AWS, Azure, GCP).
• Ability to analyze data and derive actionable insights.
• Creative and pragmatic approach to addressing GRC challenges.
• Rigor in managing documentation and evidence.
• Ability to work with cross-functional teams.
• Professional English; French proficiency is a plus.
• Certifications such as CISSP, CISM, CRISC, CISA, ISO 27001 Lead Auditor/Implementer

Responsabilités

• Automate GRC workflows: automate compliance monitoring, evidence collection, risk assessments, and control testing.
• Integrate GRC tools with SIEM/IAM and other enterprise systems for real-time monitoring.
• Develop dashboards and reports showing compliance status and risk exposure.
• Automate control testing and validation of technical controls.
• Enforce policy-as-code across cloud and on-premise environments.
• Automate risk assessments and prioritize risks with integrated tools.
• Streamline audit evidence collection for internal and external audits.
• Implement continuous compliance monitoring with alerts for non-compliance.
• Automate third-party risk management processes.
• Enhance incident response with automation in collaboration with Security teams.
• Maintain and optimize GRC tools for scalability and performance.

Connaissances

GRC

Automation scripting

SIEM/IAM tools

Cloud security controls

Governance & compliance

Data analysis

Cross-functional collaboration

English proficiency

Formation

Certifications: CISSP / CISM / CRISC / CISA

Outils

SIEM

IAM

Vulnerability management tools

Cloud security tools

Policy-as-code

Description du poste

Mistral AI is seeking a GRC Engineer to lead governance, risk and compliance initiatives across our AI platforms in France. You will design and automate frameworks, integrate GRC tools with SIEM/IAM, and deliver real-time dashboards that show risk exposure and control effectiveness.

In this role you will automate audits, enforce policy-as-code, and collaborate with IT, security, legal and business units. French proficiency is a plus; English is required for global collaboration.