Security Compliance Specialist

Mistral; New York (NY); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Healthcare coverage

Retirement plans

Relocation support

Job summary

Mistral, a leader in full-stack AI solutions, is seeking a Security Compliance Specialist to help develop and operate our cybersecurity compliance program. You will support implementation of security frameworks, coordinate across the organization, and help obtain and maintain certifications to support growth and enterprise business.

You will contribute to risk assessments, training, evidence collection, and collaboration with Legal, Sales, and Marketing to identify certifications that support

Qualifications

• 5+ years in cybersecurity compliance or related field.
• Experience supporting certification processes or external audits.
• Knowledge of major security standards and regulatory requirements.

Responsibilities

• Develop and manage cybersecurity compliance program.
• Define, implement, and maintain Information Security Management System.
• Coordinate audits, control assessments, and evidence collection.
• Educate teams on responsibilities and contribute to training materials.
• Track cybersecurity standards changes and assess impact.
• Collaborate with Sales, Legal, and other teams on certifications.

Skills

ISO 27001

SOC 2

NIS2

Governance

Audits

Documentation

Communication

Job description

About Mistral

Mistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems—across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector—co-creating customized AI systems that they can run on their terms.

We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited.

Role summary

As a Security Compliance Specialist, you will contribute to the development and operation of Mistral AI’s cybersecurity compliance program. You will support the implementation and maintenance of security frameworks, coordinate compliance activities across the organization, and help the company obtain and maintain the certifications required to support its growth and enterprise business.

What you will do

• Contribute to the development and ongoing management of Mistral AI’s cybersecurity compliance program.

• Support the definition, implementation, and maintenance of the Information Security Management System.

• Coordinate cybersecurity compliance activities, including internal reviews, control assessments, and external audits.

• Collect, review, and organize evidence from relevant stakeholders to demonstrate compliance with certification and regulatory requirements.

• Help teams understand their responsibilities and expected contributions to compliance initiatives.

• Develop and deliver cybersecurity compliance training and awareness materials.

• Participate in cybersecurity risk assessments and support the monitoring of remediation actions.

• Maintain compliance documentation, policies, procedures, control records, and audit materials.

• Track changes in relevant cybersecurity standards and regulations and assess their potential impact on the organization.

• Collaborate with Sales, Marketing, Legal, and other teams to identify certifications that may support customer acquisition and business development.

• Help evaluate and prioritize new certification initiatives based on business value, customer demand, implementation effort, and cost.
  

About you

• 5+ years of experience in cybersecurity compliance, information security governance, risk management, or a related field.

• Experience supporting cybersecurity compliance programs, certification processes, or external audits.

• Strong understanding of cybersecurity standards and frameworks such as ISO 27001, SOC 2, HDS, SecNumCloud, or C5.

• Familiarity with cybersecurity regulations such as NIS2, the Cyber Resilience Act, LPM, or DORA.

• Knowledge of requirements relating to sensitive or classified information, such as II 901 or IGI 1300, would be an advantage.

• Strong organizational skills and attention to detail, with the ability to manage documentation and coordinate multiple stakeholders.

• Excellent written and verbal communication skills.

• Strong analytical and problem-solving abilities.

• Ability to work collaboratively across technical, legal, commercial, and operational teams.

• Professional proficiency in English; French proficiency is a plus.

What We Offer

We offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks.

For the most up-to-date details on benefits available in your location, please refer to our Benefits page.

Privacy Policy

Your privacy matters to us. You can learn more about how we handle your personal data in our Applicant Privacy Policy.