GRC Automation Engineer — Security & Compliance

Mistral; Paris; Sur place; EUR 70 000 - 110 000; Plein temps

Résumé du poste

Mistral is seeking a GRC Engineer to lead governance, risk, and compliance efforts across cloud and on-prem environments. You will design, implement, and maintain technical and operational controls, policies, and evidence for audits and regulatory requirements.

You will automate GRC workflows, build dashboards, integrate tools (SIEM, IAM), and collaborate with IT, Security, Legal, and business units to strengthen the company's security posture and compliance program in a fast-paced AI-focused

Qualifications

• 5+ years in GRC, IT audit, cybersecurity, or related field.
• Hands-on experience with GRC tools.
• Knowledge of ISO 27001, SOC 2, NIST CSF, COBIT, GDPR, NIS2, or HIPAA.
• Proficiency in scripting/automation to streamline GRC processes.
• Experience with IT controls and risk assessment methodologies.
• Ability to work with cross-functional teams.

Responsabilités

• Automate GRC workflows to streamline compliance and testing.
• Integrate GRC tools with SIEM, IAM, and other enterprise systems.
• Develop dashboards and reports for real-time risk visibility.
• Automate risk assessments and vulnerability integrations.
• Enforce policy-as-code across cloud and on-prem environments.
• Automate audit evidence collection and streamline audits.
• Maintain and optimize GRC tools for scalability.

Connaissances

GRC tools

Scripting & automation

ISO 27001 / SOC 2 / NIST CSF

Cloud security basics

Data analysis

Stakeholder communication

Formation

Bachelor's degree in IT / Cybersecurity

Outils

SIEM

IAM

Vulnerability management tools

Policy-as-code

Description du poste

Mistral is seeking a GRC Engineer to lead governance, risk, and compliance efforts across cloud and on-prem environments. You will design, implement, and maintain technical and operational controls, policies, and evidence for audits and regulatory requirements.

You will automate GRC workflows, build dashboards, integrate tools (SIEM, IAM), and collaborate with IT, Security, Legal, and business units to strengthen the company's security posture and compliance program in a fast-paced AI-focused