Freelance Information & Security Officer, Mistral AI

• You have 5+ years of experience in security roles (Security Officer, Security Engineer, Compliance & Security Manager)
• You have a strong expertise in ISO 27001 certification and compliance frameworks
• You have a solid understanding of cloud security and best practices in a scale-up environment
• You are experienced with writing and implementing security policies
• You take initiative and drive security improvements proactively
• You don’t wait for instructions—you solve problems and take action
• You ensure security policies are meticulously documented and enforced
• You can explain security best practices clearly to both technical and non-technical teams
• You collaborate effectively with engineers, compliance officers, and leadership

Desirable

• As a freelance Information & Security Officer, you will be responsible for ensuring the security and compliance of our infrastructure, with a strong focus on ISO 27001 certification and Kubernetes security.
• You will take ownership of security policies, technical controls, and documentation, ensuring the company adheres to best practices while maintaining an efficient security posture
• This is a highly operational role where autonomy, initiative, and technical expertise are key. The role reports to the VP of Engineering
• Security Governance & Compliance
• Lead and oversee the certification processes (ISO27001, ISO27701, SOC2, …)
• Ensure security policies align with compliance requirements
• Document security controls and maintain compliance records
• Enable internal teams to fill security questionnaires and answer questions on our posture and practices
• Review cloud providers controls and security configurations
• Ensure proper access management and security enforcement
• Work with engineering teams to implement secure development practices
• Draft, maintain, and enforce security policies
• Conduct security risk assessments and propose mitigation strategies
• Create internal security guidelines and best practices
• Monitor security incidents and ensure proper response procedures
• Conduct regular security audits and penetration testing coordination
• Recommend security tools, automation processes and frameworks to enhance security processes
• Be very proactive in ensuring our security posture remains at the forefront of AI leaders