SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Mirakl is a marketplace operating system company founded in 2012, serving 450+ global marketplaces and 100k+ sellers. The company combines enterprise marketplace solutions, AI-powered multichannel selling, retail media, and agentic commerce infrastructure. With 750+ employees across 9 offices worldwide, Mirakl works with major brands like Macy's, Decathlon, Carrefour, and Airbus Helicopters.
You'll join the Security team within the Platform, Data & AI Security pillar, reporting to the Senior Security Officer in Paris. This is a permanent role (CDI) based in Paris or Bordeaux, requiring 4 days on-site per week.
Key responsibilities include:
**Compliance & Certifications (Automation-First):** Maintain ISO 27001, ISO 27018, and SOC 2 certifications using automated GRC platforms for continuous compliance monitoring. Automate evidence collection, control monitoring, and documentation workflows using modern GRC tooling, AI-powered agents, and scripting (Python, N8N). Manage and evolve the Information Security Management System (ISMS) to reflect regulatory requirements and Mirakl's AI-driven operations.
**AI Governance:** Co-design and evolve Mirakl's AI usage governance framework, including acceptable use policies, data classification for AI inputs, shadow AI detection, and AI vendor risk assessment. Maintain a live inventory of AI tools across the company and contribute to risk-based evaluation and onboarding processes. Monitor the AI governance regulatory landscape and adapt Mirakl's framework proactively.
**Security by Design:** Partner with Product and Engineering teams early in project lifecycles to embed security and compliance requirements. Participate in risk reviews across product and platform initiatives, with focus on AI-related threat vectors including prompt injection, data leakage in LLMs, and access control for models.
Required qualifications: Master's degree (Bac+5), minimum 3 years cybersecurity experience, participation in ISO 27001 audits, proven scripting and automation experience (Python, N8N or equivalent), and strong understanding of compliance frameworks and security standards. Experience in consulting firms or technology companies is a plus. You should be proactive, autonomous, with strong organizational and problem-solving skills.
