Cybersecurity Specialist – Defensive Design, Risk, Vulnerability & GRC

Sopra Steria (Belux); Machelen; Hybrid; EUR 70,000 - 100,000; Full time

Job summary

Sopra Steria Benelux is expanding its cybersecurity team to support European space and critical infrastructure programmes. The role covers defensive security design, vulnerability assessment, technical risk evaluation, and cyber GRC across multiple tracks.

We seek specialists matching your strengths to the right track within our team. You will collaborate with engineers and governance boards, and support accreditation, standards alignment, and security controls across EU regulations.

Qualifications

• Relevant Background: proven experience in security architecture/design, vulnerability management, technical risk assessment, or IT/cyber GRC and auditing.
• Frameworks & standards: familiarity with ISO/IEC 27001, ISO/IEC 27005, NIST or NIS.
• Analytical & documentation: ability to produce risk registers, compliance reviews, or audit reports.

Responsibilities

• Embed security-by-design and defense-in-depth across the system development lifecycle.
• Maintain security baselines, translate mission needs into security requirements and ensure end-to-end traceability.
• Participate in engineering milestones and change boards to evaluate security impact of changes.
• Review vendor deliverables, SoCs and Verification Control Documents.

Skills

Security architecture

Vulnerability management

Technical risk assessment

Cyber GRC

Auditing

Job description

Company Description

Sopra Steria Benelux is a significant player in cybersecurity, offering various services to protect organizations from cyber threats. Our cybersecurity department comprises a team of professionals specializing in areas such as:

• Cybersecurity Consulting
• Threat Detection and Response
• Penetration Testing
• Security Architecture and Design
• Identity and Access Management
• Data Protection and Privacy

Job Description

Location: Prague (Hybrid / On-site at client premises) & occasional European travel
Clearance requirement: Eligibility for EU SECRET / NATO SECRET Personal Security Clearance (PSC)

About the Role

We are expanding our cybersecurity team supporting high-profile European space and critical infrastructure programmes (such as Galileo, EGNOS, GOVSATCOM, Copernicus, and IRIS²).

Because our project portfolio spans multiple distinct workstreams, we are looking for specialists across several different areas—including Defensive Security Design, Vulnerability Management, Technical Risk Assessment, and Cyber GRC. We do not expect a single candidate to cover all of these disciplines. Whether you are a hands‑on security architect, a risk analyst, a vulnerability specialist, or a GRC consultant, we want to match your specific strengths to the right track within our team

Track 1: Defensive Security Design & Architecture

• Embed security-by-design and defense-in-depth principles (physical, network, host, application, and data layers) across the system development lifecycle.
• Maintain security technical baselines, translate mission needs into actionable cybersecurity requirements (e.g., in DOORS), and ensure end-to-end traceability.
• Participate in engineering milestones (PDR, CDR, AR), Configuration Change Boards (CCB), and Anomaly Review Boards (ARB) to evaluate the security impact of system changes.
• Review vendor deliverables, Statements of Compliance (SoC), and Verification Control Documents (VCD).

Track 2: Vulnerability Assessment & Lifecycle Management

• Systematically review security weaknesses in complex systems, assign severity levels, and define practical operational mitigations.
• Track the lifecycle of known vulnerabilities and verify the implementation of mitigations by system operators and contractors.
• Support security incident interfaces, prepare technical inputs for Cyber Review Boards, and contribute to vulnerability databases.

Track 3: Technical Risk Assessment

• Perform end-to-end Security Risk Assessments (SRA)—from asset and threat modeling to evaluating impact, likelihood, and risk reduction.
• Maintain and update Security Risk Registers and track the progress of Risk Treatment Plans with stakeholders.
• Analyze the security impact of operational or infrastructure changes and incorporate penetration test findings into system security plans.

Track 4: Cyber Governance, Compliance & Accreditation (GRC)

• Support security accreditation processes and prepare documentation packages for Security Accreditation Boards.
• Align technical specifications and security policies with evolving EU regulations and international standards (e.g., ISO/IEC 27001, ISO/IEC 27005, NIS).
• Contribute to internal cybersecurity audits, operational compliance checks, and security awareness initiatives.

Qualifications

What We Are Looking For

• Relevant Background: Proven experience in at least one of the following: security architecture/design, vulnerability management, technical risk assessment, or IT/cyber GRC and auditing.
• Frameworks & Standards: Familiarity with relevant security standards or regulations (such as ISO/IEC 27001, ISO/IEC 27005, NIST, or NIS).
• Analytical & Documentation Skills: Ability to produce clear technical notes, risk registers, compliance reviews, or audit reports depending on your specialization.
• Language: Fluency in English (written and spoken) to collaborate effectively across international technical teams and governance boards.
• Security Clearance: Ability to obtain (or already hold) a SECRET UE / EU SECRET Personal Security Clearance. (Bonus: Existing authorization for Galileo PRS handling)

Additional Information

Why Join Us?

• Tailored Role: Join a growing team where your responsibilities are aligned with your actual core expertise rather than a one‑size‑fits‑all checklist.
• Unique Domain: Contribute to flagship European space, satellite navigation, and secure communications programmes.
• Growth & Mobility: Opportunity to collaborate closely with specialists in adjacent tracks and expand your skills over time if you wish.
• International Environment: Work alongside top European security experts and institutions in Prague and across Europe.