Industrial Cybersecurity Expert

nexttech

16h•Hybrid

About The Position

Nexttech is seeking an Industrial Cybersecurity Expert to define, analyze, and manage cybersecurity requirements for industrial IT and OT systems, products, and projects. This role involves translating requirements from regulations, industry standards, and customer specifications into clear, actionable cybersecurity requirements. The expert will help shape a unified requirements engineering approach, support the implementation of cybersecurity processes, and collaborate with development, engineering, and project teams for consistent adoption. Responsibilities include supporting internal and external projects with cybersecurity and compliance obligations, providing training, and contributing to critical infrastructure resilience. This position is ideal for individuals with strong experience in cybersecurity requirements engineering, OT or product security, and enterprise process implementation, who are eager to take ownership of complex and emerging topics.

Requirements

Bachelor’s or Master’s degree in IT Security, Computer Science, Electrical Engineering with a focus on IT Security, or a comparable qualification
Relevant professional experience in OT security, industrial cybersecurity or product security
Proven experience in cybersecurity requirements engineering
Experience specifying, reviewing, analyzing and tracing technical or cybersecurity requirements
Hands-on experience with requirements engineering tools such as Polarion, MagicDraw or IBM Engineering Requirements Management DOORS
Experience defining, implementing and rolling out cybersecurity processes within an enterprise organization
Strong understanding of requirements traceability, lifecycle management and compliance documentation
Familiarity with relevant regulations and standards such as IEC 62443, the Cyber Resilience Act, NERC CIP, the BDEW Whitepaper, the EU Data Act and ISO 27001
Ability to translate complex regulatory and technical requirements into clear, practical actions
Experience collaborating with development, engineering and multidisciplinary project teams
Ability to develop and deliver training for technical and non-technical stakeholders
Familiarity with Agile methodologies such as Scrum and Kanban
Experience with iterative planning, backlog management and working within Agile delivery environments
Strong analytical and structured way of working
Ability to take ownership of complex topics and drive them continuously and sustainably
Strong communication and stakeholder management skills
Proficiency in both German and English
High level of initiative, adaptability and willingness to take on emerging cybersecurity challenges

Nice To Haves

Experience working within the energy, utilities or critical infrastructure sectors
Experience with secure product development lifecycle processes
Familiarity with systems engineering and model-based systems engineering concepts
Experience supporting cybersecurity audits or regulatory assessments
Knowledge of OT and industrial control system architectures
Experience working in international and distributed teams
Relevant certifications in industrial cybersecurity, product security or information security
Experience working with Jira, Confluence or similar collaboration and backlog management tools

Responsibilities

Specify, review, analyze and manage cybersecurity requirements for industrial IT and OT systems, products and projects
Translate customer, regulatory and industry requirements into clear and actionable technical requirements
Ensure end-to-end traceability of cybersecurity requirements throughout the project and product lifecycle
Review requirements for completeness, consistency, feasibility and compliance
Support engineering and development teams in understanding and implementing cybersecurity requirements
Maintain structured requirements documentation using appropriate requirements engineering tools
Contribute to the definition of a unified and holistic cybersecurity requirements engineering concept
Support the alignment of requirements engineering principles, methods and workflows across teams
Implement the agreed requirements engineering approach within projects and organizational processes
Define practical templates, guidelines and best practices for cybersecurity requirements management
Promote consistent requirement quality, documentation and traceability across the organization
Continuously improve the requirements engineering methodology based on project experience and regulatory developments
Support the definition, rollout and continuous improvement of cybersecurity processes and activities
Drive the practical adoption of cybersecurity processes across development, engineering and project teams
Translate cybersecurity policies and governance requirements into operational procedures
Support teams in integrating cybersecurity activities into their existing development and project workflows
Identify process gaps and recommend practical, sustainable improvements
Help ensure that cybersecurity processes are consistently applied throughout the organization
Develop and deliver training on cybersecurity requirements engineering
Train relevant departments on cybersecurity processes, responsibilities and compliance expectations
Support developers, engineers and project stakeholders in applying cybersecurity requirements in practice
Create guidance materials, templates and supporting documentation
Promote cybersecurity awareness and knowledge sharing across multidisciplinary teams
Act as a point of contact for questions related to cybersecurity requirements and processes
Analyze applicable cybersecurity regulations, standards and customer requirements
Translate regulatory and industry requirements into practical engineering and process activities
Support compliance with standards and regulations such as IEC 62443, the Cyber Resilience Act, NERC CIP, the EU Data Act, the BDEW Whitepaper and ISO 27001
Ensure cybersecurity requirements and their implementation remain traceable and auditable
Support internal and external projects during compliance reviews and audits
Monitor regulatory developments and assess their impact on cybersecurity requirements and processes
Support internal and external projects in fulfilling their cybersecurity requirements
Collaborate closely with development, engineering, project management and cybersecurity teams
Align cybersecurity concepts and requirements with all affected stakeholders
Facilitate discussions and decisions related to cybersecurity requirements and process implementation
Step into newly emerging cybersecurity topics and help drive quick and effective resolutions
Work within an international team of cybersecurity specialists and contribute to global knowledge exchange