Expert GRC & IA

Project overview

Our client is a fast-growing B2B AI startup, selling its solution to large international corporations. Before each contract, their security, legal, and procurement teams audit the company: compliance directly conditions signatures.

Today, the founders are responding, with the support of a first AI agent. You will take over the function and scale it up.

Your missions

• Lead large account client assessments: security, privacy, and legal questionnaires, due diligence, audits
• Arbitrate sensitive responses and defend the company's position with procurement, security, and legal teams
• Instruct the compliance aspects of contracts (MSA, DPA, security addendums) with legal counsel
• Lead the ISO 27001 process to certification, then maintain it
• Manage GDPR compliance and AI governance (AI Act), in France and internationally
• Ensure the reliability of the AI compliance agent with the CTO: sources, safeguards, improvement loop

Requirements

Practical information

• 5 to 10 years of experience in GRC, compliance, or information security
• Experience in a startup or scale-up, ideally with a SaaS or AI editor selling to large accounts
• Supplier-side experience: responding to security questionnaires and client due diligence
• Good command of ISO 27001 and GDPR; SOC 2, ISO 42001, and AI Act appreciated
• Legal understanding: reading MSAs and DPAs
• AI-native: daily use of generative AI tools
• Experience with a GRC platform (Vanta, Drata, or equivalent): a real plus
• Fluent English, autonomy, and a practical approach
• ASAP start
• Freelance to start (6 months, with possible internalization) or permanent contract
• Paris, onsite
• Direct reporting to management

Project details

• Start: flexible
• Remote: hybrid
• Location: Paris, France, FR
• Languages: French