Remote AppSec & GRC Engineer — Compliance Strategy

Complear; Portugal; Teletrabalho; EUR 90 000 - 130 000; Tempo integral

Resumo da oferta

Complear, a Portugal-based cybersecurity startup with a remote-first approach, is seeking an AppSec and GRC Engineer to own client engagements end to end, helping clients become compliant while informing product direction.

You will lead gap assessments, risk analyses and threat modeling, map products to CRA, NIS2, DORA, GDPR, and drive remediation through policies and controls, advising on secure design and audit readiness.

Qualificações

• Experience leading cybersecurity/GRC client engagements.
• Ability to map products to CRA, NIS2, DORA, GDPR and industry standards.
• Proven track record in risk assessments and threat modeling sessions.
• Experience turning regulatory requirements into concrete security controls.

Responsabilidades

• Lead gap assessments, risk analyses and threat modeling workshops.
• Map client products/ processes to CRA, NIS2, DORA, TISAX, GDPR and related standards.
• Develop remediation roadmaps, policies and controls to close gaps.
• Advise on secure design and incident response readiness for audits.
• Translate client findings into security requirements for the product team.

Conhecimentos

Threat modeling

Regulatory knowledge

Client advisory

Risk analysis

Security design

SAST/DAST

SBOM analysis

Vulnerability mgmt

Cybersecurity strategy

Ferramentas

SAST/DAST scanners

SBOM analysis

Vulnerability management

Descrição da oferta de emprego

Complear, a Portugal-based cybersecurity startup with a remote-first approach, is seeking an AppSec and GRC Engineer to own client engagements end to end, helping clients become compliant while informing product direction.

You will lead gap assessments, risk analyses and threat modeling, map products to CRA, NIS2, DORA, GDPR, and drive remediation through policies and controls, advising on secure design and audit readiness.