Industrial Cybersecurity Expert (Bulgaria)

Location: Sofia, Bulgaria Workplace: remote Yopeso has been developing a diverse range of software products, from large-scale applications to smaller solutions, for 20 years. With a growing team of over 300 employees across five locations, we are dedicated to fostering a culture of growth, transparency, and professionalism. At Yopeso, we value authenticity, curiosity, and ambition. These values drive us to build strong connections within our community and with our partners, ensuring trust, integrity, and transparency in all our business practices. We strive to maintain the highest professional standards and continuously challenge ourselves to develop high-quality, high-performance, and secure software solutions. Our approach is rooted in efficient collaboration among passionate professionals working in agile teams. Guided by curiosity and ambition, we strive to create products that are meaningful and impactful, while remaining true to our authentic selves. Responsibilities: Performing requirements engineering: Specifying, reviewing, analyzing and tracing cybersecurity requirements. Shaping a unified requirements engineering concept: Supporting the creation and alignment as well as practically implementing a unified and holistic concept for cybersecurity requirements engineering. Collaborating with various teams: Working closely with and training different departments to enable cybersecurity requirements engineering. Implementing processes: Driving the rollout and training of cybersecurity processes and activities in the organization. Ensuring compliance: Fulfilling requirements from relevant regulations, standards and best practices (e.g., IEC 62443, NERC CIP, EU Data Act, CRA and others). Performing training: Training the organization on important aspects of requirements engineering and cybersecurity processes. Requirements: Bachelor or Master degree in IT Security, Computer Science,Electrical Engineering with a focus on IT Security, or a comparable qualification with extensive professional experience in OT or product security. Expertise in requirements engineering: Experience in performing cybersecurity requirements engineering in the discipline of OT or product security. Skills in using requirements engineering tools like Polarion, MagicDraw or DOORS. Expertise in cybersecurity processes: Experience with defining, rolling out and training processes in an enterprise organization. Knowledge of regulations and standards: Familiarity with relevant cybersecurity regulations and standards (e.g., IEC 62443, CRA, NERC CIP, BDEW Whitepaper, ISO27001). Enjoyment of diverse topics: You enjoy stepping into new arising issues and help drive effective solutions. Endurance: Ability to drive topics continuous and sustainable. Communication skills: Proficient in English. Agile Methodologies Experience: Familiarity with agile methodologies such as Scrum, Kanban, and iterative planning, and backlog management.