Job Title: NIS2 Specialist
Experience: 10+ Years
Work Location: Bengaluru Millenia

Role Summary
We are seeking an experienced Cybersecurity Compliance Professional with 10+ years of expertise to lead and manage complex regulatory compliance initiatives. In this role, you will focus heavily on NIS2, DORA, and Information Security Governance, guiding European cybersecurity regulations, compliance program implementation, risk management, audit coordination, and executive stakeholder engagement. Your primary responsibility will be translating intricate regulatory requirements into actionable, sustainable security policies, controls, and operating procedures while ensuring continuous compliance across applicable frameworks.

Key Responsibilities

- Regulatory Strategy & Implementation: Lead the assessment, design, and implementation of compliance frameworks tailored to the NIS2 Directive and Digital Operational Resilience Act (DORA).
- Governance & Policy Development: Translate complex European cybersecurity mandates into robust, actionable internal security policies, standard operating procedures (SOPs), and technical controls.
- Risk & Audit Management: Drive comprehensive risk assessments, coordinate internal/external audits, and manage remediation tracking to close identified control gaps.
- Continuous Compliance Monitoring: Establish continuous monitoring mechanisms to ensure ongoing adherence to evolving regulatory updates, frameworks, and industry standards.




- Stakeholder Engagement: Act as a subject matter expert (SME), collaborating closely with cross-functional leadership, IT, legal, and risk teams across global jurisdictions.
- Incident Reporting & Governance: Guide incident response governance structures to align with strict regulatory mandatory reporting timelines and notification requirements under NIS2 and DORA

Required Skills & Qualifications

- Experience: 10+ years of skilled experience in Information Security, Risk Management, and Cybersecurity GRC, ideally within a Big 4, top advisory firm, or multinational GCC setting.
- Core Regulatory Expertise: Deep, hands-on experience with the NIS2 Directive and DORA (Digital Operational Resilience Act).
- Strong working knowledge of broader GRC frameworks (ISO 27001, NIST CSF, SOC 2).

Technical & Governance Acumen:

- Expertise in Information Security Management, enterprise risk management, and vendor/supply chain risk.
- Demonstrated ability to bridge the gap between high-level legal regulations and practical, technical security implementations.
- Soft Skills: Exceptional stakeholder management, technical writing, executive presentation skills, and the ability to drive initiatives independently in a fast-paced advisory environment.

Preferred Certifications (Optional / Advantageous)

CISM, CISSP, CRISC, CISA, or equivalent industry-recognized security and governance credentials.

📌 Specialist (India)
🏢 WILLWARE TECHNOLOGIES PRIVATE
📍 India