Senior Manager, Cybersecurity Governance Risk and Compliance(GRC)

13 ago - Pomezia
ALFASIGMA

As Cybersecurity Governance Senior Manager, you willmaintainand evolveAlfasigma'sCyber Governance, Risk & Compliance (GRC) framework across the Group, supporting the CISO in steering cyber risk management, regulatory compliance (NIS2, GDPR,GxP) and security maturity. A senior, high-visibility role spanning cyber risk assessment, ISO/IEC 27001 and NIST CSF, third-party risk, OT risk governance, AI Act and security awareness in a global, regulated pharmaceutical environment.
Possiede le qualifiche e le competenze giuste per questo lavoro? Lo scopra qui sotto e invii la sua candidatura per essere preso/a in considerazione. Your role:
- Maintain and evolve the Group's Cyber Governance, Risk & Compliance framework (ISO/IEC 27001, NIST CSF, NIS2).
- Support the CISO in reporting cyber risk to committees and top management, translating technical risk into business priorities.
- Steer NIS2, GDPR and GxP-related compliance across all Group companies and coordinate remediation plans.
- Lead enterprise cyber risk assessments and third-party / supply-chain risk assessments.




- Oversee OT risk governance, AI governance (AI Act) and Business Continuity / Operational Resilience.
- Design KPI/KRI reporting and dashboards for management and the Board, and run Security Awareness and security-culture programmes.

Who are you:
- 8+ years in Cybersecurity Governance, Risk Management or GRC, including experience supporting senior management.
- In-depth knowledge of NIS2, ISO/IEC 27001 and NIST CSF and of cyber risk assessment methodologies.
- ISO/IEC 27001 Lead Auditor certification; GRC certifications (CISM, CISA, CRISC) are a plus.
- Experience in complex regulated environments (Pharma / Life Sciences or Financial Services).
- Excellent ability to communicate cyber risk clearly and concisely.
- Excellent command of English.

What's in it for you:
- A high-visibility role reporting directly to the CISO, shaping cyber governance for a growing global pharmaceutical group.
- Rome-based with

Addetto/a lavorazione prosciutti

15 ago - Ente di decentramento regionale di Udine
Adecco Talent Attraction

Ispettore Controllo Ambientale

15 ago - San Valentino In Abruzzo Citeriore
Consorzio Eteria

Ricevi nuove offerte di lavoro

Crea una Job Alert gratuita per senior manager, cybersecurity governance risk and compliance(grc) / pomezia

Renewables E&C Project Manager — Hybrid Italy

15 ago - Milano
Sonnedix

Senior Executive Consultant

15 ago - Lombardia
JX Executive