Cybersecurity Compliance Specialist

Inetum is a European leader in digital services. Inetum’s team of 28,000 consultants and specialists strive every day to make a digital impact for businesses, public sector entities and society. Inetum’s solutions aim at contributing to its clients’ performance and innovation as well as the common good. 
Present in 19 countries with a dense network of sites, Inetum partners with major software publishers to meet the challenges of digital transformation with proximity and flexibility.  
Driven by its ambition for growth and scale, Inetum generated sales of 2.5 billion euros in 2023.  

Ensure the organization's compliance with key legal and regulatory standards and frameworks in the field of cybersecurity and data protection, promoting an organizational culture of security and responsibility.

Key Responsibilities:

• Ensure compliance with standards, certifications, and applicable laws related to data privacy (e.g., GDPR) and cybersecurity (e.g., NIS2, CRA, ISO 27001);
• Identify and document compliance gaps;
• Contribute to the development of the organization’s cybersecurity strategy, policies, and procedures;
• Act as the primary internal and external point of contact for compliance-related matters;
• Promote organizational awareness on compliance topics;
• Design and deliver training sessions to raise employee awareness on compliance, with the goal of fostering a culture of cybersecurity and data protection within the organization.

• Proven and solid professional experience in the implementation and management of compliance programs in cybersecurity and data privacy, preferably within complex corporate environments;
• Hands-on expertise in relevant frameworks and regulations, including GDPR, NIS2, ISO/IEC 27001, CRA, and other standards applicable within the European context;
• Advanced analytical skills to conduct compliance assessments, identify risks, and propose effective corrective measures;
• Excellent written and verbal communication skills, with the ability to produce clear, accurate, and audience-tailored technical documentation (technical, executive, and regulatory);
• Autonomous, proactive, and collaborative profile, with strong interpersonal skills to engage with multidisciplinary teams and both internal and external stakeholders;
• Strong ethical standards and sense of responsibility, with a firm commitment to data protection and information security.

• Workplace type: Hybrid (max. of 3 times per week in the office);
• Location: Aveiro.