Security Compliance Specialist

Mistral; Paris; Sur place; EUR 80 000 - 110 000; Plein temps

Avantages offerts par ce poste

Healthcare coverage

Parental leave

Relocation support

Résumé du poste

Mistral is seeking a Security Compliance Specialist to help build and operate its cybersecurity compliance program in a fast-paced AI environment. You will support the ISMS, coordinate internal reviews and external audits, and ensure evidence collection for certifications across the organization.

You will collaborate with Sales, Legal and Operations to align controls with business goals. Ideal candidates bring 5+ years in cybersecurity compliance, strong knowledge of ISO 27001/SOC 2 and

Qualifications

• 5+ years in cybersecurity compliance or a related field.
• Experience with certification processes or external audits.
• Knowledge of ISO 27001, SOC 2, SecNumCloud, C5.
• Familiarity with NIS2, Cyber Resilience Act, DORA.
• English proficiency; French a plus.

Responsabilités

• Develop and manage Mistral AI’s cybersecurity compliance program.
• Define, implement, and maintain the Information Security Management System.
• Coordinate compliance activities, reviews, control assessments and audits.
• Collect, review, and organize evidence for certifications and regulatory requirements.
• Help teams understand responsibilities and contributions to compliance.
• Develop and deliver cybersecurity compliance training and awareness materials.
• Participate in risk assessments and monitor remediation actions.
• Maintain compliance documents, policies, procedures, and audit materials.
• Track changes in cybersecurity standards/regulations and assess impact.
• Collaborate with Sales, Marketing, Legal and other teams on certifications.
• Evaluate and prioritize new certification initiatives based on business value.

Connaissances

Cybersecurity governance

Risk management

Documentation coordination

Communication skills

Analytical thinking

Team collaboration

English proficiency

Description du poste

About Mistral

Mistral provides full‑stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems—across high‑stakes industries like finance, manufacturing, defense, healthcare, and the public sector—co‑creating customized AI systems that they can run on their terms. We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low‑ego and team‑spirited.

Role Summary

As a Security Compliance Specialist, you will contribute to the development and operation of Mistral AI’s cybersecurity compliance program. You will support the implementation and maintenance of security frameworks, coordinate compliance activities across the organization, and help the company obtain and maintain the certifications required to support its growth and enterprise business.

What You Will Do

• Contribute to the development and ongoing management of Mistral AI’s cybersecurity compliance program.
• Support the definition, implementation, and maintenance of the Information Security Management System.
• Coordinate cybersecurity compliance activities, including internal reviews, control assessments, and external audits.
• Collect, review, and organize evidence from relevant stakeholders to demonstrate compliance with certification and regulatory requirements.
• Help teams understand their responsibilities and expected contributions to compliance initiatives.
• Develop and deliver cybersecurity compliance training and awareness materials.
• Participate in cybersecurity risk assessments and support the monitoring of remediation actions.
• Maintain compliance documentation, policies, procedures, control records, and audit materials.
• Track changes in relevant cybersecurity standards and regulations and assess their potential impact on the organization.
• Collaborate with Sales, Marketing, Legal, and other teams to identify certifications that may support customer acquisition and business development.
• Help evaluate and prioritize new certification initiatives based on business value, customer demand, implementation effort, and cost.

About You

• 5+ years of experience in cybersecurity compliance, information security governance, risk management, or a related field.
• Experience supporting cybersecurity compliance programs, certification processes, or external audits.
• Strong understanding of cybersecurity standards and frameworks such as ISO 27001, SOC 2, HDS, SecNumCloud, or C5.
• Familiarity with cybersecurity regulations such as NIS2, the Cyber Resilience Act, LPM, or DORA.
• Knowledge of requirements relating to sensitive or classified information, such as II 901 or IGI 1300, would be an advantage.
• Strong organizational skills and attention to detail, with the ability to manage documentation and coordinate multiple stakeholders.
• Excellent written and verbal communication skills.
• Strong analytical and problem‑solving abilities.
• Ability to work collaboratively across technical, legal, commercial, and operational teams.
• Professional proficiency in English; French proficiency is a plus.

Benefits

We offer a comprehensive benefits package designed to support your well‑being, growth, and work‑life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location‑specific perks.

For the most up-to‑date details on benefits available in your location, please refer to our Benefits page.