Cybersecurity Governance Specialist – Software Development (Agile)

About the role

We are looking for a Cybersecurity Governance Specialist to design, implement and run a governance program that embeds security into our Agile software development lifecycle. You will act as the bridge between regulatory requirements and day‑to‑day engineering work, ensuring security controls are part of sprints, backlogs and release gates.

Key responsibilities

• Own the design and maintenance of a cybersecurity governance framework aligned with ISO/IEC 27001, IEC 62443 and CRA.
• Translate standards into actionable requirements that fit Agile ceremonies such as Definition of Done, backlog refinement and sprint/release gates.
• Integrate security quality gates and architecture review checkpoints into the engineering lifecycle.
• Produce governance documentation (charters, operating models, decision frameworks) and facilitate governance forums.
• Author, review and maintain security policies and standards for development teams.
• Manage risk acceptance decisions, support risk assessments and assist with audits and certifications.
• Define and report on KPIs/KRIs (e.g., gate compliance rates, time‑to‑remediate findings) to leadership.

Required profile

• Experience in cybersecurity governance, preferably within an Agile software development environment.
• Strong understanding of ISO/IEC 27001, IEC 62443 and CRA requirements.
• Ability to work independently with minimal day‑to‑day guidance.
• Technical grounding in the Software Development Lifecycle to communicate credibly with engineers and architects.

Required skills

• ISO/IEC 27001
• IEC 62443
• CRA (Cybersecurity Regulatory Act)
• Agile methodology
• Software Development Lifecycle (SDLC)
• Risk assessment and management

What we offer

• Base salary of 3,000 EUR per month (gross) plus a variable bonus.
• Opportunity to shape security governance in a fast‑moving development organization.