---
title: 'Senior Third-Party Risk Specialist at Mistral'
canonical: 'https://feeny.ai/job/senior-third-party-risk-specialist-mistral-paris-8dm5htc7z3gz'
type: 'job'
last_seen: '2026-11-08'
---

# Senior Third-Party Risk Specialist at Mistral

- **Company:** [Mistral](https://feeny.ai/companies/mistral)
- **Location:** Paris, France
- **Employment:** full-time
- **Work type:** onsite
- **Posted:** 2026-07-31
- **Last confirmed live:** 2026-11-08
- **Apply:** https://jobs.ashbyhq.com/mistral.ai/029a7f5b-cbbf-42b7-bda9-5e29e1a8dcc4

## Job description

## About Mistral

Mistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector, co-creating customized AI systems that they can run on their terms. We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited.

## Role summary

As a Senior Third-Party Risk Specialist, you will be responsible for identifying, assessing, and mitigating risks associated with third parties (vendors, partners, subcontractors, etc.) at Mistral. You will play a pivotal role in safeguarding our assets, data, and reputation by ensuring that our third-party relationships adhere to the highest standards of security, compliance, and resilience. You will work closely with Legal, Procurement, Security, and Operational teams to embed a proactive third-party risk management approach into our business processes.

## What you will do

- Develop and manage the third-party risk management program: Design, implement, and maintain a structured framework for identifying, assessing, and monitoring risks associated with third parties (vendors, partners, service providers, etc.).
- Conduct third-party assessments and audits: Perform due diligence, compliance assessments, security audits, and contractual reviews to ensure third parties meet our requirements and regulatory obligations (e.g., GDPR, NIS2, DORA).
- Collaborate with internal teams: Work with Procurement, Legal, Security, and Operations teams to integrate third-party risk requirements into vendor selection, negotiation, and monitoring processes.
- Manage incidents and non-compliance: Identify and address gaps or incidents related to third parties, coordinating corrective actions and ensuring follow-up until resolution.
- Raise awareness and train stakeholders: Develop and deliver training and guidance to educate internal teams on third-party risk issues and their responsibilities.
- Maintain robust documentation: Document assessments, decisions, and actions related to third-party risk management, ensuring traceability for internal and external audits.
- Monitor regulatory and standards evolution: Stay updated on changes in regulations (e.g., NIS2, Cyber Resilience Act, GDPR) and standards (e.g., ISO 27001, SOC 2, ISO 27036) impacting third-party risk management, and propose adjustments to the internal framework.
- Optimize tools and processes: Contribute to the continuous improvement of tools (e.g., third-party risk management platforms) and methodologies to enhance the program's effectiveness.
- Align with broader resilience strategy: Ensure the third-party risk management program supports the company's overall cybersecurity and compliance objectives.
- Contract redlining and negotiation skills: Ability to review, edit, and negotiate contractual terms to align with security and compliance requirements.

## About you

- 7+ years in third-party risk management, cybersecurity compliance, information security governance, or a related field.
- Experience supporting cybersecurity compliance programs, certification processes, or external audits.
- Practical knowledge of standards and frameworks such as ISO 27001, SOC 2, NIST SP 800-53, or regulations like NIS2, DORA, GDPR.
- Proficiency in risk assessment methodologies (e.g., EBIOS RM, ISO 27005).
- Familiarity with cybersecurity regulations such as NIS2, the Cyber Resilience Act, LPM, or DORA.
- Strong organizational skills and attention to detail, with the ability to manage documentation and coordinate multiple stakeholders.
- Excellent written and verbal communication skills.
- Strong analytical and problem-solving abilities.
- Ability to work collaboratively across technical, legal, commercial, and operational teams.
- Professional proficiency in English; French proficiency is a plus.

## What We Offer

We offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks. For the most up-to-date details on benefits available in your location, please refer to our [Benefits page](https://app.notion.com/p/mistralai/Benefits-at-Mistral-36e6ba59a7fe836b93dd01737fcc27ef?source=copy_link).

Privacy Policy Your privacy matters to us. You can learn more about how we handle your personal data in our [Applicant Privacy Policy](https://legal.mistral.ai/terms/applicant-privacy-policy).

## About Mistral

## Company Overview
- **One-liner**: Mistral is a French AI company building open, frontier-grade large language models, developer platforms, and applied AI solutions for enterprises and governments.
- **Entity Type**: Private (Series C)
- **Headquarters**: Paris, France (15 rue des Halles)
- **Founded**: April 2023
- **Founders**: Arthur Mensch (CEO), Guillaume Lample (Chief Science Officer), Timothée Lacroix (CTO)

## Core Business
- **Primary industry/industries**: Artificial Intelligence, Large Language Models, Enterprise AI Software
- **Target customers**: B2B, Enterprise, Government, and Developers (B2D)
- **Mission or purpose statement**: "To make frontier AI open to all, and together solve the world's hardest problems."

## Products & Services
- **Mistral Large**: Frontier-grade large language model for complex reasoning and enterprise tasks.
- **Mistral Small 3**: Efficient, lightweight model for cost-sensitive deployments.
- **Mistral Code / Vibe**: AI agent for long-horizon, autonomous software development and task completion.
- **Le Chat**: Consumer-facing AI assistant and chatbot.
- **Mistral OCR 4**: State-of-the-art document intelligence model for extracting and understanding text from images and PDFs.
- **Mistral Forge**: Custom model development service for training, aligning, and evaluating proprietary AI models on private data.
- **Mistral Studio**: Platform for building, testing, and running AI agents and applications with full control.
- **Mistral Compute**: Infrastructure and orchestration platform for frontier-scale training and inference (edge to cloud).
- **Mistral Search Toolkit**: Tools for integrating search and retrieval into AI applications.
- **Voxtral**: Voice AI model for speech-based interactions.

## Market Standing
- **Valuation/Market Cap**: $4.016 billion (latest reported valuation, per CB Insights; date not specified but likely post-Series C)
- **Key Metric**: Total funding raised across Seed, Series A, Series B, and Series C rounds (specific amounts not disclosed in search results).
- **Notable Investors/Partners**: Not explicitly named in search results, but the company partners with organizations in finance, manufacturing, defense, energy, and the public sector.
- **Growth Signals**: 
  - Rapid scaling: 900+ employees across 30+ nationalities as of mid-2026.
  - 50% of leadership roles held by women.
  - Key product launches on a near-monthly cadence (e.g., Mistral OCR, Forge, Vibe, Compute, Search Toolkit, Voxtral).
  - Strong presence in high-stakes, regulated industries (defense, energy, public sector).

## Competitive Advantages
- **Open-source DNA**: Commitment to openness, transparency, and cost efficiency differentiates Mistral from closed, Big Tech AI labs.
- **Full-stack ownership**: Controls the entire stack from frontier models to developer tools, applications, and compute infrastructure, enabling deep customization and reliability.
- **European leadership**: Positioned as a sovereign, European AI champion, appealing to governments and enterprises seeking data control and regulatory compliance.
- **Speed and rigor**: Culture of rapid experimentation, iteration, and data-driven decision-making.

## Strategic Focus
- **Enterprise and government partnerships**: Co-creating tailored AI systems for mission-critical use cases in finance, manufacturing, defense, energy, and public sector.
- **Open platform ecosystem**: Expanding Mistral Studio and Forge to enable customers to build custom models and agents on their own data.
- **Infrastructure as a product**: Commercializing Mistral Compute to become a platform for others to train and run AI workloads.
- **Continuous model innovation**: Releasing new frontier models and capabilities (OCR, voice, code agents) at a rapid pace.

## Why Work Here
- **Culture**: Flat structure, high ownership, low ego, and a "builders, not order takers" mentality. The company values audacity, speed, rigor, and customer centricity.
- **Remote/Hybrid/Office**: Based in Paris (15 rue des Halles); relocation support and visa sponsorship offered. Specific remote/hybrid policy not detailed, but global team suggests flexibility.
- **Notable perks and benefits** (from careers page):
  - 20 weeks paid parental leave for all birthing parents.
  - 100% employer-sponsored medical, dental, and vision coverage for employees and dependents.
  - 6% 401k match (US) / 5% pension contribution (UK).
  - Childcare support (reserved daycare seats or financial assistance).
  - Meal allowances and transportation support.
  - Fitness and wellness subsidies.
  - Relocation and settling-in services.
  - Financial and career planning support.
- **Team composition**: 900+ employees from 30+ nationalities; 50% female leaders.
- **Interview process**: For science, product, and engineering roles: intro conversation → 2-5 technical exercises → 1-3 interviews (hiring manager + teammates) → values conversation → reference checks.

## Sources
1. [Mistral AI - About Page](https://mistral.ai/about/)
2. [Mistral AI - Careers Page](https://mistral.ai/careers/)
3. [Mistral AI - Homepage](https://mistral.ai/)
4. [CB Insights - Mistral AI Company Profile](https://www.cbinsights.com/company/mistral-ai)
5. [Mistral AI - LinkedIn](https://www.linkedin.com/company/mistralai)

## Other roles at Mistral

- [AI Scientist Intern - (Internship, Masters or Phd)](https://feeny.ai/job/ai-scientist-intern-internship-masters-or-phd-mistral-paris-43jzbe0kx4mv) — Paris, France
- [Engineering Manager, Serverless Containers](https://feeny.ai/job/engineering-manager-serverless-containers-mistral-paris-m06we4kkhq7s) — Paris, France
- [Engineering Manager, Fleet Delivery](https://feeny.ai/job/engineering-manager-fleet-delivery-mistral-paris-zsspnkk7y0k5) — Paris, France
- [Engineering Manager, Storage](https://feeny.ai/job/engineering-manager-storage-mistral-paris-ekf23bqg33ar) — Paris, France
- [Engineering Manager, Sandbox](https://feeny.ai/job/engineering-manager-sandbox-mistral-paris-5wx65405emb2) — Paris, France
- [Senior Engineering Manager, IaaS](https://feeny.ai/job/senior-engineering-manager-iaas-mistral-paris-n545rbk6r28j) — Paris, France
- [Forward Software Engineer](https://feeny.ai/job/forward-software-engineer-mistral-paris-gp4fe2vxk8pe) — Paris, France
- [Forward Software Engineer, Data](https://feeny.ai/job/forward-software-engineer-data-mistral-paris-5j7fnp825t2q) — Paris, France
- [Network Development Engineer, WAN & Edge](https://feeny.ai/job/network-development-engineer-wan-edge-mistral-paris-bb54t43jf8db) — Paris, France
- [Network Development Engineer, Data Center Fabrics](https://feeny.ai/job/network-development-engineer-data-center-fabrics-mistral-paris-3sgd968rfyhv) — Paris, France