Security Compliance Lead for ISO/SOC 2 Audits

Mistral; Paris; On-site; EUR 70,000 - 105,000; Full time

Job summary

Mistral is seeking a Security Compliance Specialist to help develop and operate its cybersecurity compliance program and maintain enterprise certifications. You will coordinate internal reviews, audits, and evidence collection, enabling scalable governance across the organization.

You will work with diverse teams to implement ISMS, track regulatory changes, and deliver training. English fluency is required; French is a plus. This role sits in a distributed, Europe-focused environment.

Qualifications

• 5+ years in cybersecurity compliance or governance.
• Experience supporting certification processes or external audits.

Responsibilities

• Contribute to development and ongoing management of the cybersecurity compliance program.
• Define, implement, and maintain the Information Security Management System.
• Coordinate compliance activities including internal reviews, control assessments, and audits.
• Collect, review, and organize evidence to demonstrate compliance.
• Help teams understand responsibilities for compliance initiatives.
• Develop and deliver cybersecurity compliance training and awareness materials.
• Participate in risk assessments and monitor remediation actions.
• Maintain compliance documentation, policies, and audit materials.
• Track changes in standards and regulations and assess impact.
• Collaborate with Sales, Marketing, Legal, and other teams to identify relevant certifications.
• Prioritize new certification initiatives based on business value and effort.

Skills

ISO 27001

SOC 2

risk management

communication

English proficiency

Job description

Mistral is seeking a Security Compliance Specialist to help develop and operate its cybersecurity compliance program and maintain enterprise certifications. You will coordinate internal reviews, audits, and evidence collection, enabling scalable governance across the organization.

You will work with diverse teams to implement ISMS, track regulatory changes, and deliver training. English fluency is required; French is a plus. This role sits in a distributed, Europe-focused environment.