Shape the Future of Water and Wastewater Innovation: Join Our Team! We’re seeking a passionate and skilled professional to join us as a

Cybersecurity and Infrastructure Risk Lead
Location: Thessaloniki, Greece (with remote flexibility)

Are you ready to make an impact in the critical field of water and wastewater innovation? As our Cybersecurity and Infrastructure Risk Lead , you’ll play a pivotal role in protecting our organization’s infrastructure, ensuring compliance, and driving innovation in cybersecurity.

About GWF
We are a Swiss company with established presence in Thessaloniki since 2018, and we are dedicated to revolutionizing how water is managed worldwide. With cutting-edge technologies in mechanical, ultrasonic, and radar metering, we serve diverse water sectors including wastewater, desalination, and hydro-power – also in the Greek market. Our solutions empower leading utilities, industrial companies, and critical infrastructure providers to optimize their resources effectively. Given this reach, the role will give you perspective into both network/cloud and hardware-centric security design. With a dynamic, fun, and achievement-oriented workplace spanning 8 locations and 300+ exceptional colleagues, GWF is the perfect place to grow and make a difference.

Your Role at a Glance
As part of our Global IT & Digital team, you’ll work closely with senior Leadership, development and product teams to manage a broad range of cybersecurity and governance initiatives. Your responsibilities will span from developing and implementing security strategies for both cloud and on-premises infrastructures (primarily Azure) to leading risk assessments, incident responses, compliance efforts and hardware product security audits. As we grow our Security competence, your strengths and focus will shape the direction we take.

Your Contributions Will Include
Strategic Leadership

• Develop and enhance the organization's cybersecurity strategy, ensuring alignment with industry standards like ISO 27001, NIS2, CRA, and GDPR
• Collaborate with C-level leadership to deliver insightful, actionable reports on potential threats and improvement opportunities

Policy and Compliance

• Lead audits and certifications, including ISO 27001, while supporting governance and compliance processes

Technical Expertise

• Implement and optimize tools like MS Intune, Defender, Entra ID, and Privileged Access Management to strengthen security
• Work with IT and external partners to build a resilient and agile platform and network

Product Security

• Advise R&D and product teams on security for IoT platforms and interconnected devices, with a focus on hardware-related security risks

Incident Management

• Design and execute incident response plans, investigating breaches and continuously improving the security posture.