Principal Global Cyber Compliance

We are looking for an experiencedPrincipal Global Cyber Compliance (m/f/d)professional to lead our global cyber compliance initiatives and ensure adherence to evolving cybersecurity regulations and privacy laws across all regions. In this highly visible role, you will shape and drive our cyber compliance strategy, establish meaningful compliance metrics, and collaborate with stakeholders worldwide to maintain a robust and effective compliance framework.As a trusted subject matter expert, you will work closely with the Information Security team, Legal, Privacy, and business stakeholders to translate regulatory requirements into practical processes, policies, and controls that support the organization’s compliance objectives.Main Tasks:Develop, implement, and continuously enhance the global cyber compliance strategy.Drive compliance with cybersecurity regulations and privacy laws, including GDPR, NIS2, CRA, and other applicable global regulatory requirements.Define, implement, and maintain KPIs to measure and monitor compliance with cyber regulations and privacy obligations.Monitor legislative and regulatory developments globally and ensure timely adaptation of internal policies, processes, and controls.Coordinate compliance-related processes, requirements, and policies with global peers and the Information Security team.Maintain comprehensive documentation of compliance status, compliance processes, regulatory requirements, and key stakeholders.Assess compliance performance and identify opportunities for continuous improvement.Prioritize compliance initiatives, establish relevant metrics, and drive corrective and preventive actions within assigned areas of responsibility.Support audits, assessments, and regulatory reviews by providing evidence of compliance and process effectiveness.Promote collaboration and alignment across multiple departments and international stakeholders.Requirements:Bachelor’s or Master’s degree inIT Security, Information Technology, Law, Quality Management, Quality Assurance, or a related field.Several years of professional experience working withcybersecurity laws and regulations, including at minimum:GDPR (General Data Protection Regulation)NIS2 DirectiveCyber Resilience Act (CRA)Several years of experience within compliance organizations and compliance governance frameworks.Experience working with global and cross-functional teams.Excellent English communication skills, both written and verbal.Confidence in making decisions regarding priorities, metrics, and improvement actions within your area of responsibility.* Please notethat TecAlliance can only consider candidates for employment who are legally authorized to work in a country listed in the job posting, where we have an established legal entity and payroll system. Unfortunately, we are currently unable to hire candidates who require relocation, visa support, or are located outside of that country. Of course you can apply, if you hold a work permit and are willing to / or already moved to the country. Thank you for your understanding.that it is not possible to work outside of the country you are applying for. Meaning that, if you apply e.g. for Italy, you must work from within Italy. It is not possible to work from abroad. You can work at any location within the borders of the listed country, unless the job posting specifies a particular City.that TecAlliance España is committed to equal opportunities in line with our Spanish Equality Plan. For selected roles with low female or diverse representation, and only where final candidates are assessed as equally qualified against the job requirements, positive action measures may apply as permitted by law. Any related data collection is voluntary and handled in accordance with data protection regulations. In case of questions in that regard, please reach out to with the subject "Spain Equality Plan".#J-*****-Ljbffr

Bachelor’s or Master’s degree in IT Security, Information Technology, Law, Quality Management, Quality Assurance , or a related field. Several years of professional experience working with cybersecurity laws and regulations , including at minimum: GDPR (General Data Protection Regulation) NIS2 Directive Cyber Resilience Act (CRA) Several years of experience within compliance organizations and compliance governance frameworks. Experience working with global and cross-functional teams. Excellent English communication skills, both written and verbal. Confidence in making decisions regarding priorities, metrics, and improvement actions within your area of responsibility.