GRC Automation Engineer: Real-Time Compliance & Risk

Mistral; Paris; Sur place; EUR 70 000 - 110 000; Plein temps

Résumé du poste

Mistral is seeking a GRC Engineer to design, implement, and maintain governance, risk, and compliance programs across our systems. You will automate compliance workflows, monitor risks, and enforce governance policies in collaboration with IT, Security, Legal, and Business units.

You will develop automated dashboards, integrate GRC tools with SIEM/IAM, and drive continuous improvement in controls and evidence management.

Qualifications

• 5+ years in GRC, IT audit, cybersecurity, or equivalent
• Hands-on experience with GRC tools
• Knowledge of ISO 27001, SOC 2, NIST CSF, COBIT, GDPR/NIS2/HIPAA
• Proficiency in scripting and automation for GRC processes
• Understanding IT controls and risk assessment methodologies
• Experience with SIEM, IAM, or vulnerability tooling
• Familiarity with cloud security and compliance (AWS/Azure/GCP)
• Ability to analyze data and derive insights
• Certifications such as CISSP, CISM, CRISC, CISA, ISO 27001 Lead Auditor/Implementer

Responsabilités

• Automate GRC workflows to streamline compliance monitoring, evidence collection, risk assessments, and control testing.
• Integrate GRC tools with SIEM, IAM, and ticketing systems for real-time risk visibility.
• Develop dashboards and reports for stakeholders showing compliance status and risk exposure.
• Automate control testing and validation of technical controls and configurations.
• Enforce policy-as-code across cloud and on-prem environments for consistent governance.
• Automate risk assessments and linkage with vulnerability scanning tools.
• Streamline audit evidence collection and organization for internal and external audits.
• Implement continuous compliance monitoring with alerts for non-compliance events.
• Automate vendor risk management workflows including questionnaires and scoring.
• Enhance incident response with automation in collaboration with Security teams.
• Maintain and optimize GRC tools for scalability and performance.

Connaissances

GRC experience

English proficiency

Strong communication

Automation scripting

Creative problem-solving

Regulatory knowledge

Security best practices

Strategic risk thinking

Certifications (CISSP/CISM/CRISC/CISA/

Outils

SIEM

IAM

Vulnerability management tools

Cloud security controls (AWS/Azure/GCP)

Policy-as-code tooling

Description du poste

Mistral is seeking a GRC Engineer to design, implement, and maintain governance, risk, and compliance programs across our systems. You will automate compliance workflows, monitor risks, and enforce governance policies in collaboration with IT, Security, Legal, and Business units.

You will develop automated dashboards, integrate GRC tools with SIEM/IAM, and drive continuous improvement in controls and evidence management.