Senior Vendor Risk & Compliance Strategist

Mistral; Paris; Sur place; EUR 90 000 - 120 000; Plein temps

Avantages offerts par ce poste

Healthcare coverage

Parental leave

Retirement plans

Relocation support

Wellness programs

Meal and transportation allowances

Other location-specific perks

Résumé du poste

Mistral is seeking a Senior Third-Party Risk Specialist to identify, assess and mitigate risks from vendors, partners, and subcontractors. You will work with Legal, Procurement, Security and Operations to embed robust risk management across the business and ensure regulatory compliance.

You will lead due diligence, audits, and contractual reviews, and stay ahead of evolving standards like GDPR, NIS2, and the Cyber Resilience Act while maintaining thorough documentation and training for

Qualifications

• 7+ years in third-party risk management, cybersecurity compliance, information security governance, or related field.
• Experience supporting cybersecurity compliance programs, certification processes, or external audits.
• Practical knowledge of standards and frameworks such as ISO 27001, SOC 2, NIST SP 800-53, or regulations like NIS2, DORA, GDPR.
• Proficiency in risk assessment methodologies (e.g., EBIOS RM, ISO 27005).
• Familiarity with regulations such as NIS2, Cyber Resilience Act, LPM, or DORA.
• Strong organizational skills and attention to detail, with ability to manage documentation.
• Excellent written and verbal communication skills.
• Strong analytical and problem-solving abilities.
• Ability to work collaboratively across technical, legal, commercial, and operational teams.
• Professional proficiency in English; French proficiency is a plus.

Responsabilités

• Identify, assess, and mitigate risks with third parties (vendors, partners, subcontractors).
• Embed proactive third-party risk management into business processes with Legal, Procurement, Security, and Operations.
• Digitally document assessments, decisions, and actions for audits and compliance.
• Lead training and guidance on third-party risk issues for internal teams.
• Monitor regulatory evolution (NIS2, Cyber Resilience Act, GDPR) and adjust the framework accordingly.

Connaissances

7+ years experience in TPRM

Cybersecurity compliance

ISO 27001 / SOC 2

NIS2 / DORA / GDPR

Risk assessment methods

English proficiency

Communication skills

Analytical skills

Collaborative work across teams

French proficiency (a plus)

Description du poste

Mistral is seeking a Senior Third-Party Risk Specialist to identify, assess and mitigate risks from vendors, partners, and subcontractors. You will work with Legal, Procurement, Security and Operations to embed robust risk management across the business and ensure regulatory compliance.

You will lead due diligence, audits, and contractual reviews, and stay ahead of evolving standards like GDPR, NIS2, and the Cyber Resilience Act while maintaining thorough documentation and training for