Compliance

• Develop an overview of the Cyber Resilience Act (CRA) and its implementing regulations
• Analyze the CRA service catalog and identify tooling gaps and tasks to be industrialized
• Map interfaces with the CESTI and PSIRT and VOC services
• Document product vulnerability and incident management processes, including RACI matrices and timelines
• Produce templates for security advisories, notifications, tracking registers, support matrices, and end-of-life matrices
• Develop a product risk analysis toolkit compliant with EBIOS RM and IEC 62443
• Build self-assessment checklists for each requirement
• Develop tools to support the assessment file reviewed with a notified body
• Test the tooling on a real-world engagement
• Present and hand over the tooling to GRC consultants

Internship – Strengthening GRC Tooling for Cyber Resilience Act Compliance

• Analyze the alignment between ISO 27001 and ISO 42001: common requirements, differences, and the reuse of an existing ISMS to support an AI management system
• Formalize the integration of CIA criteria with AI-specific criteria: bias, robustness, explainability, drift, and human oversight
• Study the relationship between the technical constraints surrounding an agent and the requirements and measures established by governance
• Monitor regulatory and standards developments, particularly the AI Act, ISO 42001, and the NIST AI RMF, and produce impact assessments
• Leverage projects carried out in the last quarter of 2026: field feedback, observed gaps, and recurring client questions
• Enhance the unified framework and multi-framework gap analysis grids
• Adapt standard GRC templates to AI systems: risk analysis, security policy, ongoing monitoring, and authorization
• Build a maturity-level roadmap model, including typical workstreams, milestones, and indicative effort
• Define a scalable operating model and its associated performance indicators
• Produce internal training materials and contribute to the development of service offerings and presales activities
• Collaborate with clients and Almond teams

Internship – AI Security Governance and GRC

• Draft and review regulatory documents for clinical investigations involving medical devices, including protocols, Investigator’s Brochures (IBs), and regulatory dossiers
• Contribute to the preparation of submissions to competent authorities and ethics committees in a European and/or international context
• Ensure documents comply with the Medical Device Regulation (MDR) 2017/745 and applicable guidelines
• Collaborate with clinical, quality, biometrics, and regulatory affairs teams
• Contribute to regulatory strategy for medical device clinical investigations
• Ensure the quality, consistency, and traceability of data in produced documents
• Contribute to document management and the updating of regulatory templates
• Provide consulting services to pharmaceutical and biotechnology clients on high-value projects

Regulatory Affairs Consultant – Medical Devices

• Lead the creation, revision, review, agreement, and maintenance of Investigational Medicinal Product (IMP) and Calibration Labeling
• Collaborate with Regulatory Affairs, Clinical Operations, Quality, Contract Research Organizations, Contract Manufacturing Organizations, translation vendors, artwork vendors, and packaging vendors
• Ensure label content reflects approved protocol requirements, product characteristics, storage conditions, and country-specific requirements
• Ensure compliance with local and regional regulations and internal policies across the United States, European Union, United Kingdom, Australia, Canada, Asia-Pacific, and other participating countries
• Provide labeling expertise during protocol development, clinical study start-up, amendments, and country expansion
• Coordinate translation activities and verification of multilingual labeling content
• Coordinate artwork review and approval in the compliance system
• Manage version control and change management for IMP documentation
• Support IMP labeling submissions or notifications where required
• Evaluate new regulatory requirements and industry trends and assess impacts on studies
• Support regulatory inspections and audits with IMP documentation and subject matter expertise
• Serve as regulatory point of contact for IMP labeling, independently resolving issues and escalating complex matters
• Maintain efficient labeling processes using standardized templates, checklists, and workflows
• Identify process improvements, best practices, and tools
• Assist with other clinical or commercial labeling activities and special projects

Manager, Regulatory Affairs – Clinical Labeling

• Lead CE compliance files for industrial assemblies
• Assess the applicability and requirements of the Pressure Equipment Directive (PED) (2014/68/EU) and the ATEX Directive (2014/34/EU)
• Verify the compliance of pressure equipment integrated into packages
• Conduct and update risk assessments
• Compile and update technical compliance files
• Perform documentary reviews of equipment and components supplied by subcontractors
• Verify the compliance of machinery and equipment integrated into the assembly
• Prepare and update CE marking and associated documentation
• Prepare ATEX and PED files
• Verify the ATEX suitability of integrated equipment
• Coordinate exchanges with the Notified Body (NB)
• Follow up on and track requests from the Notified Body
• Respond to the NB’s comments and requests for supporting documentation
• Monitor design changes and determine their impact on certification
• Coordinate activities with project, quality, engineering, and supplier teams
• Participate in equipment compliance inspections and final validation of compliance files
• Work on industrial projects for a leading energy-sector client

Equipment Compliance Engineer

• Lead the global Regulatory CMC strategy for a small molecule product
• Support Marketing Authorization Applications
• Lead and review Module 3 preparation and submission activities
• Support interactions with FDA, EMA and other Health Authorities, including responses to questions
• Identify regulatory risks and define mitigation strategies
• Operate within a global and cross-functional matrix environment
• Align CMC regulatory strategies with development and commercialization objectives
• Coordinate with CMC, Quality, Manufacturing, Regulatory and Technical teams
• Ensure consistency, scientific robustness and regulatory compliance of submission content
• Provide strategic input on regulatory positioning and negotiation approaches
• Ensure compliance with applicable ICH and global regulatory requirements

Senior Regulatory CMC Consultant

• Assess regulatory implications of new products, services, and business initiatives
• Partner with product and business teams to embed compliance requirements from discovery through development
• Identify compliance risks associated with existing or new offerings
• Recommend appropriate risk mitigation measures
• Review and validate commercial and communication materials for regulatory compliance
• Contribute to the design, implementation, and continuous improvement of compliance policies, procedures, and guidance
• Collaborate with Product Development, Commercial, Operations, Legal, and other business teams
• Provide actionable compliance guidance and support compliant processes and offerings

Compliance Business Officer – Payments, Customer Protection

• Conduct risk analyses (EBIOS Risk Manager, ISO 27005) and define the associated treatment plans
• Perform maturity assessments and compliance gap analyses, then develop roadmaps
• Design and deploy documentation frameworks: security policies, procedures, charters, and control plans
• Build and maintain an ISMS: scope, Statement of Applicability, metrics, management review, and certification readiness
• Manage ongoing compliance: action plans, governance committees, internal controls, tracking of gaps and exceptions
• Manage third-party risk: vendor assessments, contractual requirements, dependency registers, and exit plans
• Contribute to resilience: business impact analyses, business continuity and disaster recovery plans, cyber crisis management, and exercises
• Embed security into projects and new use cases, including AI
• Report to executive leadership through reports, committees, decision-making processes, and executive awareness initiatives
• Provide occasional support for pre-sales activities and proposal development

Senior Consultant, GRC/CISO

• Contribute to risk analyses and risk mapping
• Identify business needs and use cases
• Participate in compliance initiatives (ISO 27001, NIS2, etc.)
• Monitor security action plans
• Prepare materials for committees, audits, and reporting
• Draft and update governance documentation

Compliance jobs in France