Mistral AI
Senior Third-Party Risk Specialist
Paris +1 · On-site · Senior · Full-time · Posted Jul 31, 2026
- Location
- Paris
New York - Experience
- 7+ years in third-party risk management, cybersecurity compliance, information security governance, or a related field.
About the job
Develops and manages Mistral’s third-party risk program, assessing vendors and partners and coordinating risk mitigation with internal teams.
What you'll do
- Design and maintain a framework for identifying, assessing, and monitoring third-party risks.
- Conduct due diligence, compliance assessments, security audits, and contract reviews; coordinate corrective actions for gaps or incidents.
- Work with internal teams to integrate risk requirements into vendor processes, provide stakeholder training, and maintain audit-ready documentation.
What they ask for
- Experience supporting cybersecurity compliance programs, certification processes, or external audits.
- Practical knowledge of ISO 27001, SOC 2, NIST SP 800-53, NIS2, DORA, or GDPR.
- Proficiency in risk assessment methodologies such as EBIOS RM or ISO 27005.
- Professional proficiency in English.
Nice to have
- French proficiency.
- Contract redlining and negotiation skills.
Tools
ISO 27001, SOC 2, NIST SP 800-53, NIS2, DORA, GDPR, EBIOS RM, ISO 27005
Model-written summary · the original posting is authoritative