Mistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector, co-creating customized AI systems that they can run on their terms.
We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited.
As a Security Compliance Specialist, you will contribute to the development and operation of Mistral AI’s cybersecurity compliance program. You will support the implementation and maintenance of security frameworks, coordinate compliance activities across the organization, and help the company obtain and maintain the certifications required to support its growth and enterprise business.
Contribute to the development and ongoing management of Mistral AI’s cybersecurity compliance program.
Support the definition, implementation, and maintenance of the Information Security Management System.
Coordinate cybersecurity compliance activities, including internal reviews, control assessments, and external audits.
Collect, review, and organize evidence from relevant stakeholders to demonstrate compliance with certification and regulatory requirements.
Help teams understand their responsibilities and expected contributions to compliance initiatives.
Develop and deliver cybersecurity compliance training and awareness materials.
Participate in cybersecurity risk assessments and support the monitoring of remediation actions.
Maintain compliance documentation, policies, procedures, control records, and audit materials.
Track changes in relevant cybersecurity standards and regulations and assess their potential impact on the organization.
Collaborate with Sales, Marketing, Legal, and other teams to identify certifications that may support customer acquisition and business development.
Help evaluate and prioritize new certification initiatives based on business value, customer demand, implementation effort, and cost.
5+ years of experience in cybersecurity compliance, information security governance, risk management, or a related field.
Experience supporting cybersecurity compliance programs, certification processes, or external audits.
Strong understanding of cybersecurity standards and frameworks such as ISO 27001, SOC 2, HDS, SecNumCloud, or C5.
Familiarity with cybersecurity regulations such as NIS2, the Cyber Resilience Act, LPM, or DORA.
Knowledge of requirements relating to sensitive or classified information, such as II 901 or IGI 1300, would be an advantage.
Strong organizational skills and attention to detail, with the ability to manage documentation and coordinate multiple stakeholders.
Excellent written and verbal communication skills.
Strong analytical and problem-solving abilities.
Ability to work collaboratively across technical, legal, commercial, and operational teams.
Professional proficiency in English; French proficiency is a plus.
We offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks.
For the most up-to-date details on benefits available in your location, please refer to our Benefits page.
Your privacy matters to us. You can learn more about how we handle your personal data in our Applicant Privacy Policy.
Job details are sourced from the employer's original posting.
Open job postingAbout the company
Mistral AI is an artificial intelligence company focused on democratizing AI through high-performance, optimized, open-source, and cutting-edge models, products, and solutions. Their comprehensive AI platform is designed to meet enterprise needs in both on-premises and cloud environments.