Who you are

- Bachelor's or Master's degree in IT Security, Information Technology, Law, Quality Management, Quality Assurance, or a related field

- Several years of professional experience working with cybersecurity laws and regulations, including at minimum:

- GDPR (General Data Protection Regulation)

- NIS2 Directive

- Cyber Resilience Act (CRA)
- Several years of experience within compliance organizations and compliance governance frameworks

- Experience working with global and cross-functional teams

- Excellent English communication skills, both written and verbal

- Confidence in making decisions regarding priorities, metrics, and improvement actions within your area of responsibility

What the job involves

- We are looking for an experienced Principal Global Cyber Compliance (m/f/d) professional to lead our global cyber compliance initiatives and ensure adherence to evolving cybersecurity regulations and privacy laws across all regions
- In this highly visible role, you will shape and drive our cyber compliance strategy, establish meaningful compliance metrics, and collaborate with stakeholders worldwide to maintain a robust and effective compliance framework

- As a trusted subject matter expert, you will work closely with the Information Security team, Legal, Privacy, and business stakeholders to translate regulatory requirements into practical processes, policies, and controls that support the organization's compliance objectives

- Develop, implement, and continuously enhance the global cyber compliance strategy





- Drive compliance with cybersecurity regulations and privacy laws, including GDPR, NIS2, CRA, and other applicable global regulatory requirements

- Define, implement, and maintain KPIs to measure and monitor compliance with cyber regulations and privacy obligations

- Monitor legislative and regulatory developments globally and ensure timely adaptation of internal policies, processes, and controls

- Coordinate compliance-related processes, requirements, and policies with global peers and the Information Security team

- Maintain comprehensive documentation of compliance status, compliance processes, regulatory requirements, and key stakeholders

- Assess compliance performance and identify opportunities for continuous improvement

- Prioritize compliance initiatives, establish relevant metrics, and drive corrective and preventive actions within assigned areas of responsibility

- Support audits, assessments, and regulatory reviews by providing evidence of compliance and process effectiveness

- Promote collaboration and alignment across multiple departments and international stakeholders

The application process

- We kindly ask you to send in an English CV only. Thank you

Benefits





- ? Our fixed base salary is paid within 12 salaries and as extra, you have a 3% variable that is based on company performance

- ? Company credit card for travel: whenever you travel a lot you know the struggle. You must advance travel costs. Never do that again. With your company credit card, your cash stays with you if you hand in your expense bill promptly

- ? Company pension plan

- ?️Group accident insurance

- ?‍♀️ Bike leasing

- ? Discounts on our corporate benefits program with a broad range of partners

- ? in case you work on one of our sites, we offer subsidized meals

- Location-independency & and flexibility stay with us:

- ? Full or hybrid Remote: Depending on your location, you can work 80-100% remotely within Germany. However, we have regular on-site team events, and you can work at any of our sites in Germany

- ? Structured Onboarding: you receive an individual onboarding plan, have multiple onboarding days in the beginning, and a wealth of e-learning, training, and documentation besides your team at your disposal

- ?‍? Set-up: for this, we will provide you with a tailored tech set-up (Dell devices, the standard remote package includes a notebook, 2monitors, headset, mouse + keyboard, docking station)

- ? Vacation: 30 days a year

- ⚖️ Balance job & life: Versátil working hours: you decide where and when you work

- ? OKRs instead of micromanagement: our OKRs ensure that our leadership style is based on results, not the process. In other words, we practice extreme ownership

📌 Principal Global Cyber Compliance (Barcelona)
🏢 Tecalliance
📍 Barcelona