Cybersecurity Specialist – Defensive Design, Risk, Vulnerability & GRC

About the role

Sopra Steria Benelux is expanding its cybersecurity team supporting high-profile European space and critical infrastructure programmes (Galileo, EGNOS, GOVSATCOM, Copernicus, IRIS²). The role is based in Prague, hybrid and on-site at the client premises, with occasional European travel. It covers four tracks: Defensive Security Design, Vulnerability Management, Technical Risk Assessment and Cyber GRC, and does not expect a single candidate to cover all of them.

Key responsibilities

• Defensive Security Design: embed security-by-design and defense-in-depth across the system development lifecycle, maintain security baselines and translate mission needs into cybersecurity requirements (e.g. in DOORS), and take part in PDR, CCB and ARB meetings and in reviewing vendor deliverables, SoCs and VCDs.
• Vulnerability Management: review security weaknesses in complex systems, assign severity levels, define mitigations, track the lifecycle of known vulnerabilities and support incident interfaces and Cyber Review Boards.
• Risk Assessment: perform end-to-end Security Risk Assessments, maintain Security Risk Registers and Risk Treatment Plans, and incorporate penetration test findings into security plans.
• GRC: support security accreditation, prepare documentation for Security Accreditation Boards, align policies with EU regulations and standards such as ISO/IEC 27001, ISO/IEC 27005 and NIS, and contribute to audits, compliance checks and awareness initiatives.

Required profile

• Proven experience in at least one of: security architecture/design, vulnerability management, technical risk assessment, or IT/cyber GRC and auditing.
• Ability to write clear technical notes, risk registers, compliance reviews or audit reports depending on your specialization.
• Fluency in English, written and spoken.
• Eligibility for, or existing, EU SECRET / NATO SECRET Personal Security Clearance (a bonus: existing authorization for Galileo PRS handling).

Required skills

• Familiarity with security standards such as ISO/IEC 27001, ISO/IEC 27005, NIST or NIS.
• Knowledge of frameworks such as DOORS, NIST and ISO/IEC 27001 is helpful.

What we offer

• A tailored role aligned with your core expertise rather than a one-size-fits-all checklist.
• The chance to work on flagship European space, satellite navigation and secure communications programmes.
• Opportunities to collaborate with specialists in adjacent tracks and grow your skills.
• An international environment with European security experts and institutions in Prague and across Europe.