Cybersecurity Specialist – Defensive Design, Risk, Vulnerability & GRC

Location: Machelen, Belgium; Prague, Czech Republic — hybrid, with on-site work at client premises and occasional European travel.

Company

hirify.global Benelux provides cybersecurity services including consulting, threat detection and response, penetration testing, security architecture, identity and access management, and data protection.

What you will do

• Support European space and critical infrastructure programmes including Galileo, EGNOS, GOVSATCOM, Copernicus, and IRIS².
• Develop defensive security designs, technical baselines, cybersecurity requirements, and end-to-end traceability across system development lifecycles.
• Assess vulnerabilities, assign severity, define mitigations, track remediation, and contribute to vulnerability databases and cyber review boards.
• Perform security risk assessments, maintain risk registers, track risk treatment plans, and assess the impact of operational or infrastructure changes.
• Support security accreditation, compliance reviews, audits, security policies, and documentation for Security Accreditation Boards.
• Review vendor deliverables and compliance evidence and participate in engineering, change, anomaly, and governance boards.

Requirements

• Proven experience in at least one area: security architecture/design, vulnerability management, technical risk assessment, or IT/cyber GRC and auditing.
• Familiarity with relevant standards or regulations such as ISO/IEC 27001, ISO/IEC 27005, NIST, or NIS.
• Ability to produce technical notes, risk registers, compliance reviews, or audit reports appropriate to the specialization.
• Fluent English, written and spoken, required for collaboration with international technical teams and governance boards.
• Ability to obtain or already hold SECRET UE / EU SECRET Personal Security Clearance required.
• Existing authorization for Galileo PRS handling is a bonus.
• Experience across every listed discipline is not required; solid expertise in at least one track is sufficient.

Nice to have

• Existing authorization for Galileo PRS handling.

Culture & Benefits

• Hybrid work with on-site presence at client premises in Prague and occasional European travel.
• Responsibilities are aligned with the candidate’s core specialization rather than requiring coverage of every cybersecurity discipline.
• Opportunity to collaborate with specialists across defensive design, vulnerability management, risk assessment, and GRC.
• International environment involving European security experts and institutions.