Cyber Security Compliance Specialist

About the role

A consultancy is looking for a Cyber Security Compliance specialist to work on high-impact cybersecurity and compliance projects for its clients. The role helps clients strengthen security governance, manage risk and meet evolving regulatory requirements, with a focus on the European regulatory environment.

Key responsibilities

• Support clients in achieving and maintaining compliance with cybersecurity regulations and standards such as NIS2, ISO/IEC 27001, TISAX and GDPR.
• Carry out security assessments, gap analyses, risk assessments and business impact analyses, identifying remediation actions and improvement opportunities.
• Design, implement and maintain Information Security Management Systems (ISMS) aligned with international standards and best practices.
• Analyse business processes, operational dependencies and critical systems to define business continuity requirements, including RTO, RPO and MTPD.
• Support consulting engagements on audit readiness, certification processes and regulatory compliance programs.
• Provide strategic guidance on cybersecurity governance, risk management and security posture, including vCISO activities.
• Develop cybersecurity policies, procedures, standards and governance documentation.
• Deliver training and awareness sessions on cybersecurity and compliance.
• Monitor regulatory developments and advise clients on new requirements.
• Collaborate with technical and business stakeholders, consultants and international teams.

Required profile

• 3-5 years of experience in cyber security compliance, GRC, cybersecurity consulting, governance or information security management.
• Previous experience in the European regulatory and compliance environment.
• Strong knowledge and practical experience with GDPR and/or NIS2; good knowledge of ISO/IEC 27001 and familiarity with TISAX.
• Proven experience with security audits, risk assessments, gap analyses and compliance programs.
• Experience designing or implementing security governance frameworks, ISMS and compliance processes.
• Knowledge of business continuity and disaster recovery principles, such as ISO 22301 and ISO/TS 22317.
• Italian and English at B2 level or higher; availability to travel when required.
• Nice to have: degree in Computer Science, Engineering, Cybersecurity, Law or a related field; certifications such as ISO/IEC 27001 Lead Auditor, CISA, CISM or CISSP; vCISO, Compliance Manager or Information Security Manager experience; knowledge of ISO 31000, NIST Cybersecurity Framework or ISO 22301; experience in regulated industries; GRC platform experience; cloud security, SIEM/SOC, vulnerability management, network security and IAM knowledge.

Candidates apply by sending their CV through the company's careers channel; only shortlisted candidates will be contacted for an interview.