Senior Third-Party Risk Specialist

Mistral AI is hiring a Senior Third-Party Risk Specialist for a remote role open to applicants in France. Level rates it ; you can apply on Mistral AI.

Level's read on this job

Level rates this role Little AI ●○○○: aI is not part of the work.
The posting lists this role as remote.
Tools and skills the posting cites include third party risk management, vendor due diligence and compliance.
Level classifies it as a senior role.
Level lists 230 other open roles at Mistral AI.

AI in this role

Develop and manage third-party risk management programs to safeguard assets, data, and regulatory compliance at Mistral.

third-party-risk-managementvendor-due-diligencecompliancesecurity-auditsrisk-mitigation

About Mistral

Mistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector, co-creating customized AI systems that they can run on their terms.

We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited.

Role summary

As a Senior Third-Party Risk Specialist, you will be responsible for identifying, assessing, and mitigating risks associated with third parties (vendors, partners, subcontractors, etc.) at Mistral. You will play a pivotal role in safeguarding our assets, data, and reputation by ensuring that our third-party relationships adhere to the highest standards of security, compliance, and resilience. You will work closely with Legal, Procurement, Security, and Operational teams to embed a proactive third-party risk management approach into our business processes.

What you will do

Develop and manage the third-party risk management program: Design, implement, and maintain a structured framework for identifying, assessing, and monitoring risks associated with third parties (vendors, partners, service providers, etc.).
Conduct third-party assessments and audits: Perform due diligence, compliance assessments, security audits, and contractual reviews to ensure third parties meet our requirements and regulatory obligations (e.g., GDPR, NIS2, DORA).
Collaborate with internal teams: Work with Procurement, Legal, Security, and Operations teams to integrate third-party risk requirements into vendor selection, negotiation, and monitoring processes.
Manage incidents and non-compliance: Identify and address gaps or incidents related to third parties, coordinating corrective actions and ensuring follow-up until resolution.
Raise awareness and train stakeholders: Develop and deliver training and guidance to educate internal teams on third-party risk issues and their responsibilities.
Maintain robust documentation: Document assessments, decisions, and actions related to third-party risk management, ensuring traceability for internal and external audits.
Monitor regulatory and standards evolution: Stay updated on changes in regulations (e.g., NIS2, Cyber Resilience Act, GDPR) and standards (e.g., ISO 27001, SOC 2, ISO 27036) impacting third-party risk management, and propose adjustments to the internal framework.
Optimize tools and processes: Contribute to the continuous improvement of tools (e.g., third-party risk management platforms) and methodologies to enhance the program's effectiveness.
Align with broader resilience strategy: Ensure the third-party risk management program supports the company's overall cybersecurity and compliance objectives.
Contract redlining and negotiation skills: Ability to review, edit, and negotiate contractual terms to align with security and compliance requirements.

About you

7+ years in third-party risk management, cybersecurity compliance, information security governance, or a related field.
Experience supporting cybersecurity compliance programs, certification processes, or external audits.
Practical knowledge of standards and frameworks such as ISO 27001, SOC 2, NIST SP 800-53, or regulations like NIS2, DORA, GDPR.
Proficiency in risk assessment methodologies (e.g., EBIOS RM, ISO 27005).
Familiarity with cybersecurity regulations such as NIS2, the Cyber Resilience Act, LPM, or DORA.
Strong organizational skills and attention to detail, with the ability to manage documentation and coordinate multiple stakeholders.
Excellent written and verbal communication skills.
Strong analytical and problem-solving abilities.
Ability to work collaboratively across technical, legal, commercial, and operational teams.
Professional proficiency in English; French proficiency is a plus.

What We Offer

We offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks.

For the most up-to-date details on benefits available in your location, please refer to our Benefits page.

Privacy Policy

Your privacy matters to us. You can learn more about how we handle your personal data in our Applicant Privacy Policy.

How we rate this

Senior Third-Party Risk Specialist at Mistral AI rates 10 out of 100 for how much of the daily work is AI. That makes it Little AI (AI Level 1 of 4). The level is about AI in the job, not seniority.

Classification

Little AI. AI is not part of the work.

●●●● Builds AI80 to 100
●●●○ Works on AI60 to 79
●●○○ Uses AI40 to 59
●○○○ Little AI0 to 39

Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.

Key facts

Senior Third-Party Risk Specialist is an open job at Mistral AI.
Level rates this role AI Level 1 of 4: Little AI.
The role is based in Paris and is marked remote.
The job was posted on July 31, 2026.
Seniority: senior.
Applications are handled by Mistral AI. Apply on Mistral AI

Prepare for this job

Built from this posting and from similar jobs on Level.

Skills and AI tools this role asks for

Third Party Risk ManagementVendor Due DiligenceComplianceSecurity AuditsRisk Mitigation

Questions you could be asked

Tell me about a project where third party risk management was part of your work. What did you do?
Tell me about a project where vendor due diligence was part of your work. What did you do?
Tell me about a project where compliance was part of your work. What did you do?
Tell me about a project where security audits was part of your work. What did you do?
Tell me about a project where risk mitigation was part of your work. What did you do?

Adapt your resume

List these exact terms on your resume: Third Party Risk Management, Vendor Due Diligence, Compliance, Security Audits, and Risk Mitigation. An applicant tracking system matches the wording, not the idea.
Attach one line of real, concrete experience to at least one of them. A tool named with nothing behind it rarely survives a human read.

Want an expert to read your CV for this job?

Free. Send your CV and the role you want next. You get your review by email within 24 hours.

Get a free CV review Get your CV rewritten Check your resume with the ATS resume checker