Cybersecurity Compliance Consultant (f/m/d)

Stellenbeschreibung:

Cybersecurity Compliance Consultant (f/m/d)

Location:

01/01/2026

About Onekey

ONEKEY is the leading European specialist in Product Cybersecurity & Compliance Management and part of the investment portfolio of PricewaterhouseCoopers Germany (PwC). The unique combination of the automated Product Cybersecurity & Compliance Platform (OCP) with expert knowledge and consulting services provides fast and comprehensive analysis, support, and management to improve product cybersecurity and compliance from product purchasing, design, development, production to end‑of‑life. Leading international companies in Asia, Europe and the Americas already benefit from the ONEKEY Product Cybersecurity & Compliance Platform and ONEKEY Cybersecurity Experts.

We are looking for you if you

Cybersecurity Compliance Expert: You understand regulations like CRA and RED, staying ahead of emerging cybersecurity and privacy mandates.
Regulatory Navigator: You interpret compliance requirements and develop clear, actionable strategies that integrate seamlessly into product development.
Strategic Consultant & Project Leader: You guide clients through compliance challenges, manage audits and risk assessments, and drive continuous improvement.
Educator & Collaborator: You work across teams to provide expert compliance insights and equip stakeholders with the knowledge to stay ahead of regulations.

What We Offer

A World‑Class Team: World class cybersecurity expert team in Belgium, Germany, Hungary.
European Leader in Product Cybersecurity & Compliance: Being part of the leading European team and technology for product cybersecurity & compliance.
Flexible Work Model: We primarily follow a hybrid work model, combining time at our Düsseldorf office with remote work. However, we are open to remote colleagues who are willing to travel for key events such as workshops and client meetings.
Start‑Up Spirit, Streamlined Processes: A start‑up atmosphere, but with stream‑lined processes (not overcontrolled ones).
Flat Hierarchies and Transparent Culture: Flat hierarchy and a transparent and open-minded culture.
Competitive Compensation & Top Equipment: Highly competitive compensation, state of the art equipment.
Collaboration Across Borders: Opportunity to meet your colleagues in person in Belgium, Germany, Hungary.
Modern Communication: No emails, just Slack for our daily internal communication.

Responsibilities

Regulatory Monitoring & Interpretation: Stay current on emerging regulations and standards, including CRA, RED, and other relevant cybersecurity and privacy mandates. Interpret compliance requirements and translate them into actionable guidelines for product teams and clients.
Compliance Program Development: Design and implement compliance strategies that integrate seamlessly into product design, development, and maintenance. Provide clear documentation, guidelines, and best practices to ensure ongoing adherence to relevant standards.
Project Management: Lead and coordinate compliance‑related initiatives across internal stakeholders (e.g., legal, product, engineering) and with external partners. Set clear milestones and timelines, ensuring projects are delivered on time and within scope.
Audits & Assessments: Conduct regular audits, risk assessments, and gap analyses to identify compliance vulnerabilities. Develop and track remediation plans, ensuring continuous improvement of security and compliance postures.
Cross‑Functional Collaboration: Work closely with cybersecurity consultants, legal experts, and client‑facing teams to provide a holistic compliance perspective. Offer support and expertise to clients during product certification or audit processes.
Education & Training: Educate internal teams and external clients on best practices, emerging threats, and potential impacts of regulatory changes. Develop training materials and conduct workshops, ensuring stakeholders are equipped to meet compliance obligations.

Qualifications

Education & Background: Bachelor’s or Master’s degree in Law, Computer Science, Information Security, Engineering, or a related field.
Regulatory & Standards Knowledge: Familiarity with CRA, RED, and other cybersecurity regulations (e.g., EN 303 645, ISO/IEC 27001, IEC62443, NIS2). Understanding of broader compliance frameworks in cybersecurity or data protection is a plus.
Professional Experience: 2+ years of experience in cybersecurity and/or compliance roles, preferably within regulated industries. Demonstrated success in leading or supporting complex compliance projects.
Analytical & Detail‑Oriented: Strong ability to interpret regulatory documents, identify risks, and propose data‑driven remediation strategies.
Communication & Interpersonal Skills: Excellent written and verbal communication skills in English & German. Ability to present complex information clearly to diverse audiences and influence stakeholders at various levels.
Team Player & Self‑Starter: Proactive, solution‑oriented mindset with the ability to work effectively both independently and in cross‑functional teams.