IT/OT Security Owner / Cybersecurity & CRA Responsible

Project overview

Dear Freelancers,

For a demanding technical project environment, we are looking for an experienced IT/OT Security Owner with a focus on Cybersecurity and the Cyber Resilience Act (CRA).

The focus is on ensuring cybersecurity requirements in customer projects – from planning and technical implementation to successful acceptance. We are looking for a security-oriented personality who assesses risks, coordinates technical security measures, and ensures compliance with relevant standards and regulatory requirements.

Responsibilities

• Central point of contact for IT/OT security topics in the assigned projects
• Execution and documentation of Security Risk Assessments and Cyber Resilience Assessments
• Ensuring the implementation of customer-specific security requirements as well as relevant standards and regulatory requirements
• Management of hardening measures for servers, operating systems, applications, networks, and OT components
• Coordination of vulnerability, patch, and incident management
• Planning and support of penetration tests, vulnerability assessments, and security audits
• Evaluation and security of OT architectures, especially network segmentation, Industrial DMZ, and Purdue model
• Support in the introduction of security monitoring, XDR, and endpoint protection solutions
• Management of security risks, escalations, and compliance topics until project acceptance

Requirements

• Several years of experience in IT/OT cybersecurity
• Good knowledge of relevant security standards and regulatory requirements, especially IEC 62443, ISO 27001, NIS2, and Cyber Resilience Act (CRA)
• Experience with security assessments, audits, penetration tests, and vulnerability management
• Profound knowledge of network, server, and OT security architectures as well as technical security measures
• Ability to assess security risks, prioritize measures, and track their implementation
• Independent, structured, and solution-oriented way of working, as well as strong communication skills in collaboration with technical teams and project managers

Nice to have

Is the offered project suitable for you? If so, please send us the following information:

0 = No know-how

+ = Basic knowledge

++ = Good know-how

+++ = Very good know-how

By sending your documents, you agree to our privacy policy.

• Experience in international customer and plant projects
• Practical experience in the introduction of security monitoring, XDR, or endpoint protection solutions
• A current CV
• Your earliest possible availability date
• Your available utilization in %
• Your remote and onsite hourly rates for Graz & Giebelstadt
• 1-2 reference projects that demonstrate your relevant experience in the field
• A cover letter of approx. 10-15 lines with a specific reference to the project request and a brief explanation of why you believe you are a suitable match for the project
• A self-assessment of the required skills and requirements using the following legend:

Project details

Immediately

12 months | Total 260 PT

Remote (130 PT), Onsite Graz (65 PT) as well as Onsite Giebelstadt (65 PT)

Utilization: Full-time | 100%

• Start: ab sofort
• Duration: 8 Monate
• Remote: hybrid
• Location: Graz und Giebelstadt, Deutschland, DE
• Languages: German