Daniel Bora

Background

About Daniel Bora

I am a Security Governance & Compliance professional who bridges the gap between complex regulatory landscapes and technical security implementation. My background—spanning the Czech Ministry of Interior and EU Council working groups to hands-on GRC roles in tech—allows me to view compliance not as a repetitive checklist, but as a strategic enabler for business growth. Currently, I serve as a Senior Security Governance Analyst at Rapid7, where I lead security compliance strategy for the EMEA and APJ regions. My primary focus is unlocking market access by managing rigorous national frameworks, including C5 (Germany), ENS (Spain), IRAP (Australia), and DESC CSP (UAE). I also drive organizational readiness for major regulations like NIS2 and the Cyber Resilience Act, handling everything from gap analyses to direct communication with regulators. Beyond my regional responsibilities, I support the wider GRC team by contributing to global policy maintenance and assisting with the continuous improvement of foundational frameworks like ISO 27001 and SOC 2. I thrive in cross-functional environments where I can translate heavy regulatory requirements into actionable, efficient security processes.