Cyber-summer at the Cybrela academy. 6 cybersecurity webinars, online every other Friday. Register for free ➡️

Compliance Architect – kyber / GRC

  • Hybrid (Prague 7 / online)
  • Freelance (part-time / project-based) or full-time employment

Cybrela AI/tech is the technology arm of the Cybrela consulting group (cybersecurity and compliance – NIS2, DORA, ISO 27001, CRA). We're building an AI tool for cybersecurity compliance. And AI is only as good as the knowledge inside it. We're looking for someone who can turn expert know-how and regulation into structured, usable logic. It's the equivalent of a "legal engineer" in legal-tech – a translator between regulation and product, not a consultant writing a memo for a single client. A small, well-coordinated team with direct influence over how the product comes to life.

What you'll do

  • Translate key frameworks (ISO 27001, NIS2 / Czech Cybersecurity Act, DORA, GDPR) into a structured, machine-usable form – decision trees, control mapping, requirement decomposition.
  • Design how the tool guides the client through the compliance process step by step.
  • Serve as the expert guarantor of quality – what's defensible and what isn't.
  • Keep the knowledge current as regulation evolves.
  • Work closely with the AI engineer: you bring the domain, they bring the technology.

What we expect from you

MUST HAVE

  • Real implementation experience in cyber compliance, not just theory: ISMS, gap analyses, audits, regulator readiness.
  • Deep knowledge of ISO 27001, NIS2 / Czech Cybersecurity Act, DORA, GDPR.
  • The ability to think structurally – in logic and structures, not just prose. This is key.
  • Excellent written communication (CS + EN).
  • An appetite for working close to tech and learning new tools (you don't need to code).

NICE TO HAVE

  • ISO 27001 Lead Implementer / Lead Auditor, CISM / CISA / CISSP.
  • German.
  • Experience in regtech / legal-tech or building knowledge bases and decision trees.

What we offer

  • Your know-how finally scales – described well once, used a thousand times. No billing hours one client at a time.
  • A small team, short decision-making chains, direct influence over the product.
  • Work on something still being built – you shape it from the ground up.
  • Flexible format and location.

Interested in the role?

Let us know about yourself – send us your CV or a link to your LinkedIn. We'll get back to you within a few days.
Send CV