Cybersecurity Governance, Risk & Compliance Specialist

The role focuses on cybersecurity governance, risk management, regulatory compliance, and security control monitoring, working closely with Corporate IT, Operations, Legal, and business stakeholders to strengthen the organization’s information security posture and ensure alignment with recognized standards and applicable regulations.

Key Responsibilities

• Develop, maintain, and support the implementation of information security policies, procedures, standards, and governance processes
• Conduct and coordinate information security risk assessments, gap analyses, and business impact analyses
• Identify security risks and control gaps, recommend remediation measures, and monitor their implementation
• Support compliance with information security standards and regulations, including ISO/IEC 27001, NIS2, and the Cyber Resilience Act (CRA)
• Coordinate internal and external security audits, certifications, compliance assessments, and evidence collection
• Monitor the effectiveness of security controls across IT infrastructure, applications, services, and business processes
• Collaborate with Corporate IT and business stakeholders to translate security requirements into practical controls and ensure their effective implementation
• Support vulnerability management, exception management, incident response, and risk remediation activities
• Monitor cybersecurity regulatory developments and support the implementation of new or updated compliance requirements
• Document and report findings from security assessments, audits, and compliance reviews
• Contribute to security awareness initiatives and support AI governance activities, where applicable, in alignment with ISO/IEC 42001 and the EU AI Act

Requirements

• Relevant educational background in Cybersecurity, Information Security, Information Technology, Computer Science, or a related field
• Professional experience in cybersecurity, information security, Governance, Risk & Compliance (GRC), IT risk management, or a related area
• Knowledge of information security management systems and recognized standards, particularly ISO/IEC 27001
• Understanding of cybersecurity risk assessments, security controls, compliance processes, and risk remediation
• Familiarity with cybersecurity regulations, such as NIS2 and the Cyber Resilience Act (CRA)
• Experience supporting security audits, compliance assessments, documentation, and remediation tracking
• Understanding of IT infrastructure, applications, networks, and security controls
• Strong analytical and problem-solving skills, with a structured and pragmatic approach to work
• Excellent communication and stakeholder management skills, with the ability to collaborate across technical and business functions
• Strong sense of responsibility, ownership, attention to detail, and commitment to continuous improvement

The following would be considered an advantage

• ISO/IEC 27001 Lead Implementer, Lead Auditor, or other relevant cybersecurity certifications
• Experience implementing or maintaining an ISMS
• Experience with NIS2, CRA, vulnerability management, or incident response
• Familiarity with AI governance, ISO/IEC 42001, or the EU AI Act

Our Offer

• The opportunity to contribute to the development and continuous improvement of the company’s cybersecurity and information security practices. Join a team of experienced and motivated professionals
• Work in a company that produces high-quality fiber-optic cabling solutions and has access to modern equipment and unique know-how
• Individual training program and career path
• Competitive salary
• Attractive additional social benefits (Multisport card, additional health insurance, food vouchers, Christmas bonus and others);

If you are passionate about information security, risk management, and regulatory compliance, and want to contribute to strengthening cybersecurity practices across an international organization, we look forward to receiving your application in English.

Only shortlisted candidates will be contacted. Please be advised that all applications will be treated with the strictest confidentiality and in accordance with GDPR and local regulations.