Cybersecurity GRC Specialist

Reichle & De-Massari Bulgaria Production is part of the Swiss-based Reichle Group, operating in over 40 countries worldwide. As a leader in copper and fiber solutions for high-quality communication networks (xPON, LAN, MAN, WAN), R&M ranks among the top 3 companies in the sector across Europe and the Middle East.

Founded in 1964, the company remains family-owned and focused on innovation, precision, and quality. Our Bulgarian production unit, established in 2012, now employs nearly 350 people and continues to grow. We specialize in a wide range of optical components and solutions, developed and manufactured by a team of skilled engineers, designers, and technicians.

In addition to our production site, R&M is also represented locally by R&M Bulgaria, which has been active on the market for over 17 years and operates in 12 countries across Southeastern Europe.

We are ambitious and continue to grow and we are looking to hire motivated professional for the position of:

Cybersecurity Governance, Risk & Compliance Specialist

The role focuses on cybersecurity governance, risk management, regulatory compliance, and security control monitoring, working closely with Corporate IT, Operations, Legal, and business stakeholders to strengthen the organization's information security posture and ensure alignment with recognized standards and applicable regulations.

Key Responsibilities:

• Develop, maintain, and support the implementation of information security policies, procedures, standards, and governance processes.
• Conduct and coordinate information security risk assessments, gap analyses, and business impact analyses.
• Identify security risks and control gaps, recommend remediation measures, and monitor their implementation.
• Support compliance with information security standards and regulations, including ISO/IEC 27001, NIS2, and the Cyber Resilience Act (CRA).
• Coordinate internal and external security audits, certifications, compliance assessments, and evidence collection.
• Monitor the effectiveness of security controls across IT infrastructure, applications, services, and business processes.
• Collaborate with Corporate IT and business stakeholders to translate security requirements into practical controls and ensure their effective implementation.
• Support vulnerability management, exception management, incident response, and risk remediation activities.
• Monitor cybersecurity regulatory developments and support the implementation of new or updated compliance requirements.
• Document and report findings from security assessments, audits, and compliance reviews.
• Contribute to security awareness initiatives and support AI governance activities, where applicable, in alignment with ISO/IEC 42001 and the EU AI Act.

Requirements:

• Relevant educational background in Cybersecurity, Information Security, Information Technology, Computer Science, or a related field.
• Professional experience in cybersecurity, information security, Governance, Risk & Compliance (GRC), IT risk management, or a related area.
• Knowledge of information security management systems and recognized standards, particularly ISO/IEC 27001.
• Understanding of cybersecurity risk assessments, security controls, compliance processes, and risk remediation.
• Familiarity with cybersecurity regulations, such as NIS2 and the Cyber Resilience Act (CRA).
• Experience supporting security audits, compliance assessments, documentation, and remediation tracking.
• Understanding of IT infrastructure, applications, networks, and security controls.
• Strong analytical and problem-solving skills, with a structured and pragmatic approach to work.
• Excellent communication and stakeholder management skills, with the ability to collaborate across technical and business functions.
• Strong sense of responsibility, ownership, attention to detail, and commitment to continuous improvement.

The following would be considered an advantage:

• ISO/IEC 27001 Lead Implementer, Lead Auditor, or other relevant cybersecurity certifications.
• Experience implementing or maintaining an ISMS.
• Experience with NIS2, CRA, vulnerability management, or incident response.
• Familiarity with AI governance, ISO/IEC 42001, or the EU AI Act.

Our Offer:

• The opportunity to contribute to the development and continuous improvement of the company's cybersecurity and information security practices.Join a team of experienced and motivated professionals;
• Work in a company that produces high-quality fiber-optic cabling solutions and have access to modern equipment and unique know-how;
• Individual training program and career path;
• Competitive salary;
• Attractive additional social benefits (Multisport card, additional health insurance, food vauchers, Christmas bonus and others);

If you are passionate about information security, risk management, and regulatory compliance, and want to contribute to strengthening cybersecurity practices across an international organization, we look forward to receiving your application in English.

Only short listed candidates will be contacted. Please be advised all applications will be treated with the strictest confidentiality and according to GDPR and local regulations.