Product Cybersecurity Compliance

Orbik Cybersecurity; Mondragón; On-site; EUR 42,000 - 56,000; Full time

Job summary

Orbik Cybersecurity in the Basque Country seeks a Product Cybersecurity Compliance Specialist to help manufacturers meet cybersecurity requirements for connected products and systems.

You will assess product security, identify gaps against regulations and standards, and support the development of technical documentation and evidence of compliance across the product lifecycle, collaborating with cybersecurity and engineering teams.

Qualifications

• Degree in Engineering, Computer Science, Telecommunications, Law, Business Administration, or a related field.
• At least 1 year of consulting and/or auditing experience.
• Relevant certifications (e.g., CISA, CISM, CRISC, CEH) are valued.
• Strong knowledge of cybersecurity regulations and standards (ENS, CCN-STIC, GDPR, LOPD, CRA, RED-DA, IEC 62443, ISO/IEC 1803).
• Strong analytical, reporting, and communication skills for technical and non-technical audiences.
• Advanced English for international documentation and projects.

Responsibilities

• Prepare and review compliance documentation.
• Conduct compliance audits and verify required security measures.
• Advise on applicable sector-specific regulations.
• Coordinate with clients, suppliers, and internal teams.
• Assess risks and vulnerabilities across systems, processes, and information assets

Skills

Analytical skills

Reporting skills

Communication skills

Education

Degree in Engineering, Computer Science, Telecommunications, Law, Business Administration, or related field

Job description

• The opportunity to work on meaningful cybersecurity projects that improve the safety, resilience, and compliance of connected products.
• A collaborative, multidisciplinary environment focused on innovation, quality, and continuous improvement.
• Hands-on experience with real cybersecurity, industrial, and product-compliance challenges, supported by learning, mentoring, and career-development opportunities.
• The stability and values of the MONDRAGON cooperative ecosystem, combined with the agility of a growing technology company.
• Competitive compensation, comprehensive benefits, and flexible working arrangements that support work-life balance.

What We Offer

• The opportunity to work on meaningful cybersecurity projects that improve the safety, resilience, and compliance of connected products.
• A collaborative, multidisciplinary environment focused on innovation, quality, and continuous improvement.
• Hands-on experience with real cybersecurity, industrial, and product-compliance challenges, supported by learning, mentoring, and career-development opportunities.
• The stability and values of the MONDRAGON cooperative ecosystem, combined with the agility of a growing technology company.
• Competitive compensation, comprehensive benefits, and flexible working arrangements that support work-life balance.

Requisitos:

What are we looking for?

We are looking for a Product Cybersecurity Compliance Specialist to join our multidisciplinary team and contribute to projects that help manufacturers meet cybersecurity requirements for connected products and systems.

You will work closely with cybersecurity and engineering professionals to assess product security, identify gaps against applicable regulations and standards, and support the development of technical documentation and evidence of compliance. Your work will help integrate cybersecurity requirements throughout the product lifecycle.

Your Main Responsibilities

• Prepare and review compliance documentation.
• Conduct compliance audits and verify required security measures.
• Advise on applicable sector-specific regulations.
• Coordinate with clients, suppliers, and internal teams.
• Assess risks and vulnerabilities across systems, processes, and information assets

Requirements

• Degree in Engineering, Computer Science, Telecommunications, Law, Business Administration, or a related field.
• At least 1 year of consulting and/or auditing experience.
• Relevant certifications (e.g., CISA, CISM, CRISC, CEH) are valued.
• Strong knowledge of cybersecurity regulations and standards (ENS, CCN-STIC, GDPR, LOPD, CRA, RED-DA, IEC 62443, ISO/IEC 1803).
• Strong analytical, reporting, and communication skills for technical and non-technical audiences.
• Advanced English for international documentation and projects.