For a modern and growth-oriented cybersecurity company, we are looking for a Principal Cybersecurity Consultant (m/f/d) in Düsseldorf for direct placement.

In this key role, you will lead complex Secure-by-Design transformations for enterprise clients and take ownership from strategy and security architecture through to implementation and outcomes. You will combine deep cybersecurity expertise with strategic consulting and work closely with CISOs, CTOs, product leadership, experienced engineers and security architects.

• A responsible Principal-level position with end-to-end ownership of complex cybersecurity transformations
• Direct collaboration with company leadership without a traditional consulting pyramid
• Enterprise projects across sectors including telecommunications, banking, insurance, automotive and critical infrastructure
• Hybrid working model in Düsseldorf with two remote days per week as a baseline
• Additional remote periods depending on client schedules, as well as workations within the EU
• Typically 3–5 days of travel per month to client sites within the DACH region
• Occasional international travel for workshops and conferences
• English as the internal working language – German is not a mandatory requirement
• The opportunity to actively shape methods, accelerators and scalable Secure-by-Design solutions

• You lead complex Secure-by-Design transformation programs for enterprise clients and take ownership of the strategy, client relationship and outcome
• You develop security target architectures, transformation strategies and rollout roadmaps and guide their implementation across multiple teams and project phases
• You design and lead cloud security programs, including control frameworks, risk assessments and security architectures for AWS, Azure or GCP environments
• You integrate security requirements into cloud landing zones and modern software engineering environments
• You develop Secure SDLC programs covering CI/CD security, threat modelling, security champions and relevant security KPIs and KRIs
• You develop security approaches for LLMs, agentic systems and MLSecOps and translate regulatory requirements into concrete technical measures
• You advise CISOs, CTOs and product leadership while working closely with security architects and engineers
• You help develop methods, accelerators and the Secure-by-Design practice and support the professional development of other consultants
• You contribute to a platform designed to make Secure-by-Design approaches scalable across different client engagements

• You have at least 7 years of professional experience in cybersecurity and a proven track record of leading enterprise programs end-to-end and owning outcomes
• You have strong technical expertise in cloud security across AWS, Azure, or GCP, as well as modern software engineering environments involving CI/CD, Infrastructure as Code, and containers
• You have hands-on experience with Secure-by-Design, Security Architecture, Secure SDLC, Cloud Security, or AI Security at enterprise scale
• You are comfortable working with CISOs, CTOs, and product leadership while also being able to discuss architecture in depth with experienced engineers
• You have professional English skills
• German language skills at B2 level or higher are an advantage, but not a requirement
• Experience with AI Security / MLSecOps, Kubernetes platform security, or regulatory requirements such as NIS2, DORA, the EU Cyber Resilience Act, or the EU AI Act is an advantage

Would you like to apply your expertise in cybersecurity and take strategic and technical ownership of complex enterprise security transformations? We look forward to getting to know you.

If you have any questions, please contact Simona Dankova at 0211 / 54 55 87 19 or sdankova@flexit-consulting.de.