Security Compliance Specialist

Firstminute Capital; New York (NY); Hybride; USD 90 000 - 130 000; Plein temps

Avantages offerts par ce poste

Healthcare coverage

Retirement plans

Relocation support

Wellness programs

Meal allowances

Transportation allowances

Résumé du poste

Mistral AI is seeking a Security Compliance Specialist to help develop and run its cybersecurity compliance program. You will support the implementation of security frameworks, coordinate across teams, and help the company obtain and maintain certifications for growth and enterprise customers.

You will contribute to the ISMS, manage evidence for audits, deliver training, and monitor regulatory changes. The role requires 5+ years in cybersecurity compliance and knowledge of ISO 27001, SOC 2,

Qualifications

• 5+ years of experience in cybersecurity compliance or a related field.
• Experience supporting cybersecurity compliance programs, certification processes, or external audits.
• Strong understanding of cybersecurity standards such as ISO 27001, SOC 2, HDS, SecNumCloud, or C5.
• Familiarity with regulations such as NIS2, Cyber Resilience Act, LPM, or DORA.
• Excellent organizational skills and attention to detail, with the ability to manage documentation and coordinate multiple stakeholders.
• Excellent written and verbal communication skills.
• Ability to work collaboratively across technical, legal, commercial, and operational teams.

Responsabilités

• Develop and manage the cybersecurity compliance program.
• Define, implement, and maintain the Information Security Management System.
• Coordinate cybersecurity compliance activities, including internal reviews and external audits.
• Collect, review, and organize evidence to demonstrate regulatory compliance.
• Deliver cybersecurity compliance training and awareness materials.
• Monitor changes in standards and regulations and assess impact on the organization.
• Collaborate with Sales, Legal, and other teams to identify certifications that support customer acquisition and business development.

Connaissances

Cybersecurity governance

Risk management

Information security

English proficiency

Description du poste

About Mistral

Mistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector, co-creating customized AI systems that they can run on their terms.

We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited.

Role summary

As a Security Compliance Specialist, you will contribute to the development and operation of Mistral AI’s cybersecurity compliance program. You will support the implementation and maintenance of security frameworks, coordinate compliance activities across the organization, and help the company obtain and maintain the certifications required to support its growth and enterprise business.

What you will do

• Contribute to the development and ongoing management of Mistral AI’s cybersecurity compliance program.

• Support the definition, implementation, and maintenance of the Information Security Management System.

• Coordinate cybersecurity compliance activities, including internal reviews, control assessments, and external audits.

• Collect, review, and organize evidence from relevant stakeholders to demonstrate compliance with certification and regulatory requirements.

• Help teams understand their responsibilities and expected contributions to compliance initiatives.

• Develop and deliver cybersecurity compliance training and awareness materials.

• Participate in cybersecurity risk assessments and support the monitoring of remediation actions.

• Maintain compliance documentation, policies, procedures, control records, and audit materials.

• Track changes in relevant cybersecurity standards and regulations and assess their potential impact on the organization.

• Collaborate with Sales, Marketing, Legal, and other teams to identify certifications that may support customer acquisition and business development.

• Help evaluate and prioritize new certification initiatives based on business value, customer demand, implementation effort, and cost.
  

About you

• 5+ years of experience in cybersecurity compliance, information security governance, risk management, or a related field.

• Experience supporting cybersecurity compliance programs, certification processes, or external audits.

• Strong understanding of cybersecurity standards and frameworks such as ISO 27001, SOC 2, HDS, SecNumCloud, or C5.

• Familiarity with cybersecurity regulations such as NIS2, the Cyber Resilience Act, LPM, or DORA.

• Knowledge of requirements relating to sensitive or classified information, such as II 901 or IGI 1300, would be an advantage.

• Strong organizational skills and attention to detail, with the ability to manage documentation and coordinate multiple stakeholders.

• Excellent written and verbal communication skills.

• Strong analytical and problem-solving abilities.

• Ability to work collaboratively across technical, legal, commercial, and operational teams.

• Professional proficiency in English; French proficiency is a plus.

What We Offer

We offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location‑specific perks.

For the most up-to-date details on benefits available in your location, please refer to our Benefits page.

Privacy Policy

Your privacy matters to us. You can learn more about how we handle your personal data in our Applicant Privacy Policy.