Cybersecurity Advisory Expert, Product Owner

Yopeso
Summary
Join Yopeso, a 20-year-old software company with over 250 employees, as a Cybersecurity Advisory Expert. You will play a key role in enhancing security practices, mitigating risks, and ensuring compliance across various projects. This position requires providing expert guidance in multiple cybersecurity domains and collaborating with teams to implement security controls. Yopeso offers competitive remuneration, remote work, sports/leisure benefits, generous paid time off, team events, a professional development plan, training opportunities, and optional medical insurance. The ideal candidate possesses a Bachelor's or Master's degree in a related field, 5+ years of experience in cybersecurity consulting, and hands-on expertise in network security and penetration testing.
Requirements
- Bachelor’s or Master’s degree in Cybersecurity, Computer Science, or a related field
- 5+ years in cybersecurity consulting, risk assessment, or security advisory roles
- Hands-on expertise in network security, penetration testing, and compliance frameworks
- Proficiency in Nessus, Metasploit, Wireshark, and other vulnerability assessment tools
- Experience with Python, Java, or C++ for security automation
- Strong knowledge of firewalls, IDS/IPS, VPNs, and secure network architecture
- Excellent communication, problem-solving, stakeholder management, and teamwork
- Fluent in English (German is a plus)
Responsibilities
- Conduct security assessments – Perform in-depth security assessments and audits to identify vulnerabilities and risks
- Develop security strategies – Design and implement cybersecurity policies and strategies to protect critical assets
- Provide expert consulting – Offer specialized cybersecurity advice to projects and initiatives
- Ensure compliance – Align security measures with industry standards ( IEC 62443, IEC 62351, NIST, CRA ) and best practices
- Stakeholder communication – Present findings, risk reports, and security recommendations to key stakeholders
- Conduct training & workshops – Educate teams on cybersecurity best practices, tools, and threat landscapes
- Collaborate with development teams – Support the technical implementation of security controls in engineering processes
- Enhance security tools & automation – Utilize and integrate tools like Nessus, Metasploit, Wireshark, and scripting (Python, Java, C++)
Preferred Qualifications
- Industry experience in finance, healthcare, critical infrastructure, or industrial systems
- CISSP (Certified Information Systems Security Professional)
- CISM (Certified Information Security Manager)
- CEH (Certified Ethical Hacker)
- Additional cloud security, network security, or risk management certifications are a plus
Benefits
- Competitive remuneration
- Remote work
- Sports/leisure benefit
- 20 sick leave days paid at 100%
- 32 calendar days of vacation
- Team events, online, at the office or outside
- Professional development plan with guidance and mentorship
- Training and development opportunities with allocated budget
- Professional Certifications
- Optional medical insurance