# Cybersecurity Specialist – Defensive Design, Risk, Vulnerability & GRC at Sopra Steria

Sopra Steria is hiring a Cybersecurity Specialist – Defensive Design, Risk, Vulnerability & GRC for a remote role open to applicants in Belgium. Level rates it Little AI ●○○○; you can [apply on Sopra Steria](https://jobsbylevel.com/go/32c5b86e-b594-4371-ab72-3a2ccdda1a28?utm_medium=ai-agent).

AI Level 1, AI centrality 0 out of 100. Remote (Machelen, Vlaanderen, Belgium).

## Details

- Company: [Sopra Steria](https://jobsbylevel.com/companies/sopra-steria)
- AI level: AI Level 1 (score 0 out of 100)
- Location: Remote (Machelen, Vlaanderen, Belgium)
- Posted: November 12, 2026
- Apply: https://jobsbylevel.com/go/32c5b86e-b594-4371-ab72-3a2ccdda1a28?utm_medium=ai-agent
- Free CV review for this job: https://jobsbylevel.com/cv-review?job=cybersecurity-specialist-defensive-design-risk-vulnerability-grc-at-sopra-steria-377b5d

## Prepare for this job

The job page lists 5 likely interview questions for this offer, with a CV checklist: https://jobsbylevel.com/jobs/cybersecurity-specialist-defensive-design-risk-vulnerability-grc-at-sopra-steria-377b5d

## Description

Sopra Steria Benelux is a significant player in cybersecurity, offering various services to protect organizations from cyber threats. Our cybersecurity department comprises a team of professionals specializing in areas such as: Cybersecurity Consulting Threat Detection and Response Penetration Testing Security Architecture and Design Identity and Access Management Data Protection and Privacy Location: Prague (Hybrid / On-site at client premises) & occasional European travel Clearance requirement: Eligibility for EU SECRET / NATO SECRET Personal Security Clearance (PSC) About the Role We are expanding our cybersecurity team supporting high-profile European space and critical infrastructure programmes (such as Galileo, EGNOS, GOVSATCOM, Copernicus, and IRIS²). Because our project portfolio spans multiple distinct workstreams, we are looking for specialists across several different areas —including Defensive Security Design , Vulnerability Management , Technical Risk Assessment , and Cyber GRC . We do not expect a single candidate to cover all of these disciplines. Whether you are a hands-on security architect, a risk analyst, a vulnerability specialist, or a GRC consultant, we want to match your specific strengths to the right track within our team Track 1: Defensive Security Design & Architecture Embed security-by-design and defense-in-depth principles (physical, network, host, application, and data layers) across the system development lifecycle. Maintain security technical baselines, translate mission needs into actionable cybersecurity requirements (e.g., in DOORS), and ensure end-to-end traceability. Participate in engineering milestones (PDR, CDR, AR), Configuration Change Boards (CCB), and Anomaly Review Boards (ARB) to evaluate the security impact of system changes. Review vendor deliverables, Statements of Compliance (SoC), and Verification Control Documents (VCD). Track 2: Vulnerability Assessment & Lifecycle Management Systematically review security weaknesses in complex systems, assign severity levels, and define practical operational mitigations. Track the lifecycle of known vulnerabilities and verify the implementation of mitigations by system operators and contractors. Support security incident interfaces, prepare technical inputs for Cyber Review Boards, and contribute to vulnerability databases. Track 3: Technical Risk Assessment Perform end-to-end Security Risk Assessments (SRA)—from asset and threat modeling to evaluating impact, likelihood, and risk reduction. Maintain and update Security Risk Registers and track the progress of Risk Treatment Plans with stakeholders. Analyze the security impact of operational or infrastructure changes and incorporate penetration test findings into system security plans. Track 4: Cyber Governance, Compliance & Accreditation (GRC) Support security accreditation processes and prepare documentation packages for Security Accreditation Boards. Align technical specifications and security policies with evolving EU regulations and international standards (e.g., ISO/IEC 27001, ISO/IEC 27005, NIS). Contribute to internal cybersecurity audits, operational compliance checks, and security awareness initiatives. What We Are Looking For You do not need experience in every area listed above—solid expertise in at least one of these domains is what matters most: Relevant Background: Proven experience in at least one of the following: security architecture/design, vulnerability management, technical risk assessment, or IT/cyber GRC and auditing. Frameworks & Standards: Familiarity with relevant security standards or regulations (such as ISO/IEC 27001, ISO/IEC 27005, NIST, or NIS). Analytical & Documentation Skills: Ability to produce clear technical notes, risk registers, compliance reviews, or audit reports depending on your specialization. Language: Fluency in English (written and spoken) to collaborate effectively across international technical teams and governance boards. Security

The description is cut here. Read the full offer: https://jobsbylevel.com/jobs/cybersecurity-specialist-defensive-design-risk-vulnerability-grc-at-sopra-steria-377b5d

Source: https://jobsbylevel.com/jobs/cybersecurity-specialist-defensive-design-risk-vulnerability-grc-at-sopra-steria-377b5d

## Cite this page

Level. https://jobsbylevel.com/jobs/cybersecurity-specialist-defensive-design-risk-vulnerability-grc-at-sopra-steria-377b5d.

Get job alerts: https://jobsbylevel.com/newsletter