Cybersecurity Compliance Specialist
Pubblicato il 10-09-2026 - Appsierra Group in Agrate Brianza
Key Responsibilities
- Define and document cybersecurity compliance requirements for information-system controls in collaboration with system owners and system managers.
- Develop and maintain templates covering security processes, controls and technical security solutions across digital services.
- Support system owners and IT service providers with:
- Business Impact Assessments (BIA).
- Definition of security scope.
- Risk assessments.
- Security plans.
- Secure system architecture designs.
- Implementation plans.
- Assist with cybersecurity remediation activities, including:
- Tracking identified non-conformities.
- Assigning corrective actions.
- Monitoring remediation progress.
- Verifying closure of corrective actions within agreed deadlines.
- Contribute to the development and maintenance of security baselines for information systems and digital services.
- Coordinate and review risk assessments, ensuring that identified risks are evaluated against established compliance criteria and that mitigation measures are properly documented.
- Prepare compliance-status reports highlighting security gaps, risks and remediation progress.
- Collaborate with system owners, IT service providers and other stakeholders to ensure consistent interpretation and implementation of cybersecurity policies.
- Participate in technical and stakeholder meetings and communicate security requirements to both technical and non-technical audiences.
- Produce clear, structured and high-quality security documentation, templates and guidance material.
- Keep up to date with evolving technologies, particularly cloud services, AI-driven applications and other digital services, and their associated cybersecurity implications.
Required Qualifications
- Minimum EQF Level 5 education, typically corresponding to at least two years of post-secondary education or higher.
- Educational background in Cybersecurity, Information Security, Computer Science, IT, Risk Management, Governance, Audit or a rel