GRC Engineer - Automate Compliance & Risk Insights

Mistral.ai; Paris; Sur place; EUR 70 000 - 110 000; Plein temps

Avantages offerts par ce poste

Healthcare coverage

Relocation support

Wellness programs

Meal & transportation allowances

Résumé du poste

Mistral.ai is seeking a GRC Engineer to design, implement, and maintain GRC programs ensuring regulatory, security, and risk obligations are met. You will automate compliance workflows, monitor risks, and enforce governance policies across cloud and on-prem environments.

You will collaborate with IT, Security, Legal, and Business units to integrate GRC tools, develop dashboards, and streamline audits. Fluent English required; French a plus.

Qualifications

• 5+ years in GRC, IT audit, cybersecurity, or related field.
• Hands-on experience with GRC tools.
• Deep knowledge of compliance frameworks (ISO 27001, SOC 2, NIST CSF, COBIT) or GDPR/NIS2/HIPAA.
• Proficiency in scripting and automation to streamline GRC processes.
• Strong understanding of IT controls, risk assessment methodologies, and security best practices.
• Experience with SIEM, IAM, or vulnerability management tools.
• Familiarity with cloud security and compliance (AWS, Azure, GCP).
• Ability to analyze complex data and derive insights.
• Creative and pragmatic approach to addressing GRC challenges.
• Rigor in documentation, controls, and compliance evidence.
• Ability to work with cross-functional teams.
• Clear written and verbal communication; English fluent; French a plus.
• Certifications such as CISSP, CISM, CRISC, CISA, ISO 27001 Lead Auditor/Implementer.

Responsabilités

• Automate GRC workflows to streamline compliance monitoring, evidence collection, risk assessments and tests.
• Integrate GRC tools with SIEM, IAM, and ticketing systems for real-time monitoring.
• Develop dashboards and reports for real-time compliance visibility.
• Automate control testing and validation across IT controls.
• Enforce policy-as-code across cloud and on-prem environments.
• Automate risk assessments by linking vulnerability scanners with GRC platforms.
• Streamline audit evidence collection for internal and external audits.
• Implement continuous compliance monitoring with automated alerts.
• Automate third-party risk management workflows including questionnaires and scoring.
• Enhance incident response with automation in collaboration with Security teams.
• Maintain and optimize GRC tools for scalability and performance.

Connaissances

GRC tools

Scripting & automation

IT controls

Risk assessment

Security best practices

SIEM/IAM/vulnerability tools

Cloud security & compliance

Communication skills

Certifications (CISSP/CISM/CRISC/CISA)

Outils

SIEM

IAM

Description du poste

Mistral.ai is seeking a GRC Engineer to design, implement, and maintain GRC programs ensuring regulatory, security, and risk obligations are met. You will automate compliance workflows, monitor risks, and enforce governance policies across cloud and on-prem environments.

You will collaborate with IT, Security, Legal, and Business units to integrate GRC tools, develop dashboards, and streamline audits. Fluent English required; French a plus.