We are looking for an Information Security & Compliance Consultant to join a compliance-focused team supporting organizations in achieving regulatory cybersecurity standards. The ideal candidate has hands-on experience with EU cybersecurity frameworks, demonstrates strong stakeholder management, and thrives in a cross-jurisdictional advisory environment.
Details:
Location: Czech Republic, Slovakia
Schedule: Remote (occasional onsite)
Languages: English, Czech and German a plus
Start: ASAP
Responsibilities:
- Perform gap analysis for legal entities and impacted business units against NIS2 or similar cybersecurity directives.
- Advise and support the development of remediation plans to close compliance gaps within defined timelines.
- Provide guidance on country-specific regulatory requirements and ensure alignment with local legislation.
- Support documentation of cybersecurity processes, including updates to support packages.
- Assist in developing incident reporting processes, ensuring timely reporting for significant security incidents.
- Define and support the creation of audit evidence sets for compliance audits.
- Collaborate with internal teams to formalize monitoring and reporting processes.
- Conduct tabletop simulations to test incident reporting workflows.
- Provide expert advice on best practices for cybersecurity compliance and risk management.
- Support and advise local IT management on compliance and security matters.
Requirements:
- Proven experience in Information Security compliance projects, preferably with NIS2 or similar regulatory frameworks.
- Strong knowledge of EU cybersecurity regulations and incident reporting obligations.
- Experience in IT risk management, governance, and audit preparation.
- Ability to work across multiple jurisdictions and interpret country-specific legislation.
- Excellent communication and stakeholder management skills.
- Fluent in English; Czech or German is a plus.
- Certifications such as CISSP, CISM, or ISO 27001 Lead Implementer are highly desirable.