Cybersecurity Specialist – Security Framework Implementation

Core details:

• Company type: International manufacturer of analytical instruments
• Location: Cluj-Napoca, with regular travel to Nușfalău or backwards
• Work model: On-site
• Engagement: Employment Contract, Permanent, Full-Time
• Role level: Senior level
• Experience level: 5+ Years
• Key Skills: Cybersecurity, IT Infrastructure Security, Security Framework Implementation, Risk Assessment, CRA, Microsoft 365 / Intune, Stakeholder Management
• Department: Research & Development / IT
• Industry: Manufacturing / Analytical Instruments

About the client

Our client is is an international manufacturer of analytical instruments, with a Research & Development centre in Cluj-Napoca and a manufacturing facility in Nușfalău. As part of a group-level initiative, the company is strengthening cybersecurity across both locations and is looking for a specialist to drive this work locally, working alongside the global IT team.

About the role

A cybersecurity framework has already been defined with the support of external consultants. Your job is to turn it into working security controls. You will own the local implementation, starting with the R&D environment in Cluj (Phase 1) and continuing with the manufacturing site in Nușfalău (Phase 2).

This is a hands-on, implementation-oriented role, not a SOC monitoring or purely audit position. You will work closely with internal and external IT teams, R&D staff and production stakeholders, making sure security standards are adopted in practice, not just documented.

Responsibilities:

• Lead the local implementation of the Cybersecurity Framework, first in R&D (Cluj), then in manufacturing (Nușfalău)
• Support the R&D team in implementing the cybersecurity requirements of the EU Cyber Resilience Act (CRA)
• Review the current security setup, identify weaknesses and build a prioritised plan to address key risks
• Establish and maintain baseline security standards for computers, servers, networks, cloud services and user accounts
• Review user access and administrator permissions to ensure appropriate, role-based access
• Improve protection through secure configurations, patching, endpoint protection, firewalls and secure remote access
• Work with IT teams to make sure backups are protected and critical systems and data can be restored
• Review security alerts, investigate suspicious activity and help coordinate incident response
• Create and maintain clear procedures for incident handling and recovery from disruptions
• Support NIS2 preparations by implementing agreed security measures and documenting completed work
• Provide technical information and documentation to external legal counsel, who will assess NIS2 applicability
• Drive change in uptime-critical environments such as production, building support for new security requirements
• Raise employee awareness of common risks such as phishing, unsafe downloads and weak passwords
• Report clearly to management on security risks, completed improvements and open items

Qualifications:

• At least 5 years of experience in cybersecurity or IT security
• Solid IT infrastructure background: networks, servers, endpoints, identity and cloud services
• Practical experience assessing security risks and implementing improvements, not only recommending them
• Ability to work independently, set priorities and own a project from planning to delivery
• Strong stakeholder management skills, including bringing reluctant teams along with change
• Ability to explain technical topics in plain language to both technical and non-technical audiences
• Fluent English, spoken and written
• Experience with Microsoft 365, Intune, Fortinet, Bitdefender or similar tools is a plus
• Experience with vulnerability management, security monitoring or frameworks such as NIS2, ISO 27001, NIST or CIS is a plus
• Experience with security work in manufacturing or R&D environments is an advantage, but not required

Why GetFrankly?

At GetFrankly we are guiding talent and creating futures.

We understand that a career move is not just about a new role – it's about finding a place where your skills, ambitions, and values align.

Give us a call to discuss what's important for your career and future, and we'll try our best to get you involved in interesting projects and provide you with fulfilling career pathways.

We will guide you towards the right environment where your abilities will thrive and have a significant impact.