Security Awareness & Compliance Expert

Security Awareness & Compliance Expert

AMATAS is a managed cybersecurity services company working with organisations across Bulgaria and the EU. We're looking for a senior cybersecurity consultant to lead client engagements in governance, risk and compliance, and to own our Managed Security Awareness service.

What you'll do

• Lead cybersecurity consulting projects: gap analyses, risk assessments and compliance readiness against NIS2, ISO 27001, DORA and similar frameworks.

• Develop security policies, procedures and remediation roadmaps, and present findings to management.

• Lead the Managed Security Awareness service: program design, phishing simulations, training and reporting.

• Act as the main point of contact for your clients and build long-term relationships.

• Guide and review the work of a small delivery team and set the quality bar for deliverables.

• Support incident response readiness work, including Tabletop exercises.

What you bring

• 5+ years in cybersecurity, with a strong grounding in governance, risk and compliance.

• Hands-on experience with gap analyses and compliance projects (NIS2, ISO 27001; DORA is a plus).

• A client-facing consulting background and confidence presenting to management.

• Experience running or overseeing security awareness programs.

• Experience leading or mentoring a small team.

• Fluent Bulgarian and English.

Nice to have

• Certifications such as CISSP, CISM, ISO 27001 Lead Implementer/Auditor or Security+.

• Experience with audits or assessments in financial services.

• Automation or scripting skills (e.g. Power Automate, Python).

We offer:

· Competitive remuneration package

· Additional health insurance

· Corporate discount vouchers

· Continuous training programs

· Certification in the field of cybersecurity

Join us and be part of a team that is revolutionizing the cybersecurity landscape. Apply now and unleash your sales expertise in an environment that fosters growth, innovation, and success!