Senior Manager, Cybersecurity Governance Risk and Compliance(GRC)
Pubblicato il 17-08-2026 - ALFASIGMA in Pomezia
Job description:
Scope of the role:
As Cybersecurity Governance Senior Manager, you will maintain and evolve Alfasigma's Cyber Governance, Risk & Compliance (GRC) framework across the Group, supporting the CISO in steering cyber risk management, regulatory compliance (NIS2, GDPR, GxP) and security maturity. A senior, high-visibility role spanning cyber risk assessment, ISO/IEC 27001 and NIST CSF, third-party risk, OT risk governance, AI Act and security awareness in a global, regulated pharmaceutical environment.
Your role:
- Maintain and evolve the Group's Cyber Governance, Risk & Compliance framework (ISO/IEC 27001, NIST CSF, NIS2).
- Support the CISO in reporting cyber risk to committees and top management, translating technical risk into business priorities.
- Steer NIS2, GDPR and GxP-related compliance across all Group companies and coordinate remediation plans.
- Lead enterprise cyber risk assessments and third-party / supply-chain risk assessments.
- Oversee OT risk governance, AI governance (AI Act) and Business Continuity / Operational Resilience.
- Design KPI/KRI reporting and dashboards for management and the Board, and run Security Awareness and security-culture programmes.
Who are you:
- 8+ years in Cybersecurity Governance, Risk Management or GRC, including experience supporting senior management.
- In-depth knowledge of NIS2, ISO/IEC 27001 and NIST CSF, and of cyber risk-assessment methodologies.
- ISO/IEC 27001 Lead Auditor certification; GRC certifications (CISM, CISA, CRISC) are a plus.
- Experience in complex regulated environments (Pharma / Life Sciences or Financial Services).
- Excellent ability to communicate cyber risk clearly and concisely.
- Excellent command of English.
What's in it for you:
- A high-visibility role reporting directly to the CISO, shaping cyber governance for a growing global pharmaceutical group.
- Rome-based with hybrid working and a permanent, full-time contract.
- Real impact on the resilience and compliance postu