Cyber Security Compliance Consultant

About the role

We are seeking a skilled Cyber Security Compliance Consultant to join our dynamic team. You will work on high‑impact cybersecurity and compliance projects, helping clients strengthen security governance, manage risk, and meet evolving regulatory requirements.

Key responsibilities

• Support clients in achieving and maintaining compliance with regulations such as NIS2, ISO/IEC 27001, TISAX and GDPR.
• Conduct security assessments, GAP analyses, risk assessments and business impact analyses, and define remediation actions.
• Design, implement and maintain Information Security Management Systems (ISMS) aligned with international standards.
• Analyse business processes and critical systems to define continuity requirements (RTO, RPO, MTPD).
• Assist with audit readiness, certification processes and regulatory compliance programmes.
• Provide strategic guidance on cybersecurity governance, risk management and vCISO activities.
• Develop policies, procedures, standards and governance documentation.
• Deliver training and awareness sessions on cybersecurity best practices.

Required profile

• 3–5 years of experience in cyber security compliance, GRC or information security management.
• Professional experience within the European regulatory environment, with solid knowledge of GDPR and/or NIS2.
• Familiarity with ISO/IEC 27001, TISAX and business continuity standards such as ISO 22301.
• Proven ability to conduct security audits, risk assessments and compliance programmes.
• Strong analytical, documentation and stakeholder‑management skills.
• Ability to work independently, manage multiple projects and travel when required.
• Italian and English proficiency at B2 level or higher.

Required skills

• GDPR
• NIS2
• ISO/IEC 27001
• TISAX
• Information Security Management System (ISMS) implementation
• ISO 22301 and ISO/TS 22317 (business continuity)
• ISO 31000, ISO/IEC 27005, NIST Cybersecurity Framework
• Cloud security concepts
• SIEM / SOC environments
• Vulnerability management
• Network security
• Identity and Access Management (IAM)