AMATAS (part of Ocean Investments) is a managed cybersecurity services company working with organisations across Bulgaria and the EU. We’re looking for a senior cybersecurity consultant to lead client engagements in governance, risk and compliance, and to own our Managed Security Awareness service.
What you’ll do
- Lead cybersecurity consulting projects: gap analyses, risk assessments and compliance readiness against NIS2, ISO 27001, DORA and similar frameworks.
- Develop security policies, procedures and remediation roadmaps, and present findings to management.
- Lead the Managed Security Awareness service: program design, phishing simulations, training and reporting.
- Act as the main point of contact for your clients and build long-term relationships.
- Guide and review the work of a small delivery team and set the quality bar for deliverables.
- Support incident response readiness work, including Tabletop exercises.
What you bring
- 5+ years in cybersecurity, with a strong grounding in governance, risk and compliance.
- Hands-on experience with gap analyses and compliance projects (NIS2, ISO 27001; DORA is a plus).
- A client-facing consulting background and confidence presenting to management.
- Experience running or overseeing security awareness programs.
- Experience leading or mentoring a small team.
- Fluent Bulgarian and English.
Nice to have
- Certifications such as CISSP, CISM, ISO 27001 Lead Implementer/Auditor or Security+.
- Experience with audits or assessments in financial services.
- Automation or scripting skills (e.g. Power Automate, Python).
We offer:
- Competitive remuneration package
- Additional health insurance
- Corporate discount vouchers
- Continuous training programs
- Certification in the field of cybersecurity
Join us and be part of a team that is revolutionizing the cybersecurity landscape. Apply now and unleash your sales expertise in an environment that fosters growth, innovation, and success!