Senior Third-Party Risk & Compliance Lead

Mistral AI; Paris (KY); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Relocation support

Meal and transportation allowances

Healthcare coverage

Job summary

Mistral AI seeks a Senior Third-Party Risk Specialist to identify, assess and mitigate risks from external partners. You will safeguard assets, data, and reputation by enforcing security, compliance, and resilience across vendor relationships.

You will collaborate with Legal, Procurement, Security, and Operations to embed risk requirements, conduct due diligence and audits, and drive improvements in controls and documentation.

Qualifications

• 7+ years in third-party risk management, cybersecurity compliance, information security governance, or related field.
• Experience supporting cybersecurity compliance programs, certification processes, or external audits.
• Practical knowledge of ISO 27001, SOC 2, NIST SP 800-53, GDPR, NIS2, DORA.
• Proficiency with risk assessment methodologies (e.g., EBIOS RM, ISO 27005).
• Strong written and verbal communication; ability to coordinate across teams.

Responsibilities

• Develop and manage third-party risk management program with structured risk framework.
• Conduct third-party assessments, audits, and contract reviews for regulatory compliance.
• Collaborate with Procurement, Legal, Security, and Operations to embed risk requirements.
• Manage incidents and non-compliance, coordinating corrective actions to closure.
• Raise awareness and train stakeholders on third-party risk issues and responsibilities.
• Maintain documentation for internal and external audits.
• Monitor regulatory changes (NIS2, Cyber Resilience Act, GDPR) and adjust frameworks.

Skills

Third-party risk management

Cybersecurity compliance

Information security governance

Risk assessment methodologies

English proficiency

French proficiency

Job description

Mistral AI seeks a Senior Third-Party Risk Specialist to identify, assess and mitigate risks from external partners. You will safeguard assets, data, and reputation by enforcing security, compliance, and resilience across vendor relationships.

You will collaborate with Legal, Procurement, Security, and Operations to embed risk requirements, conduct due diligence and audits, and drive improvements in controls and documentation.