Cyber Security Compliance Specialist

About the role

We are looking for a Cyber Security Compliance specialist to join our dynamic team. You will work on high‑impact projects, helping clients strengthen security governance, manage risk, and meet evolving regulatory requirements.

Key responsibilities

• Support clients in achieving and maintaining compliance with NIS2, ISO/IEC 27001, TISAX, GDPR and related standards.
• Conduct security assessments, GAP analyses, risk assessments and business impact analyses, and define remediation actions.
• Design, implement and maintain ISMS aligned with international best practices.
• Define business continuity parameters (RTO, RPO, MTPD) and support audit‑readiness and certification processes.
• Provide strategic guidance on governance, risk management and vCISO activities, and deliver training and awareness sessions.

Required profile

• 3–5 years of experience in cyber security compliance, GRC or information security management.
• Hands‑on experience with GDPR and/or NIS2 and solid knowledge of ISO/IEC 27001 and TISAX.
• Experience with security audits, risk assessments, GAP analyses and compliance programmes.
• Strong analytical, documentation and stakeholder‑management skills, with ability to work independently.
• Fluent in English and Italian (B2 or higher) and willing to travel when required.

Required skills

• GDPR, NIS2, ISO/IEC 27001, TISAX, ISO 22301, ISO/TS 22317, ISO 31000, ISO/IEC 27005, NIST Cybersecurity Framework.
• Security audits, risk assessments, GAP analyses, ISMS implementation.
• Business continuity and disaster recovery principles.
• Cloud security, SIEM/SOC, vulnerability management, network security, IAM.