GRC Automation Engineer - Security & Compliance

Mistral AI; Paris (KY); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Healthcare coverage

Parental leave

Relocation support

Wellness programs

Meal allowances

Transportation allowances

Job summary

Mistral AI is seeking a GRC Engineer to lead governance, risk, and compliance efforts across cloud and on-prem environments. You will design automation for monitoring, testing, and reporting, and collaborate with IT, Security, Legal, and business units to enforce policies.

You will implement continuous compliance processes, integrate GRC with SIEM, IAM, and other tools, and drive evidence collection for internal and external audits. Proficiency in English is required, French a plus.

Qualifications

• 5+ years in Governance, Risk, and Compliance (GRC) roles.
• Hands-on experience with GRC tools.
• Deep knowledge of ISO 27001, SOC 2, NIST CSF, COBIT, GDPR, NIS2, or HIPAA.
• Proficiency in scripting and automation to streamline GRC processes.
• Strong IT control and risk assessment methodologies.

Responsibilities

• Automate GRC workflows to streamline compliance monitoring and control testing.
• Integrate GRC tools with SIEM, IAM, and ticketing systems for real-time monitoring.
• Develop dashboards to show compliance status, risk exposure, and control effectiveness.
• Automate risk assessments, including vulnerability scanning integration.
• Embed policy-as-code into cloud and on-prem environments for consistent enforcement.
• Automate third-party vendor risk assessments and escalation workflows.
• Support audit evidence collection and streamline audit preparation.

Skills

GRC expertise

Scripting

Automation

SIEM

IAM

Vulnerability management

Cloud security

Regulatory knowledge

Communications skills

Tools

SIEM systems

IAM tools

Vulnerability scanning tools

Job description

Mistral AI is seeking a GRC Engineer to lead governance, risk, and compliance efforts across cloud and on-prem environments. You will design automation for monitoring, testing, and reporting, and collaborate with IT, Security, Legal, and business units to enforce policies.

You will implement continuous compliance processes, integrate GRC with SIEM, IAM, and other tools, and drive evidence collection for internal and external audits. Proficiency in English is required, French a plus.