Cyber Security GRC Specialist
Pubblicato il 12-09-2026 - Msc Cruises in Italia
Job Purpose
MSC Group's Cruise Division is recruiting for its Cyber Security department a Cyber Security Governance, Risk Management, Compliance (GRC) Specialist.
The role is aimed at supporting the Cyber Security GRC team in the execution, coordination and monitoring of key governance, risk, compliance activities across MSC Group's Cruise Division.
A key focus of the role will be acting as Project Management Officer (PMO) of Cyber Security Department project initiatives, ensuring proper estimation, planning, monitoring and reporting of project activities and relating risks.
The ideal candidate will also support the implementation and continuous improvement of Cyber Security governance policies and procedures, as well as risk management and regulatory (e.g., NIS2, EU AI Act) compliance frameworks.
As a member of the Cyber Security GRC team, the candidate will contribute to strengthening the organization's security posture, and ensuring that Cyber Security activities are properly governed, monitored and reported.
Key Accountabilities
Cyber Security Governance risk and Compliance
- Support implementation and maintenance of the Cyber Security governance framework aligned with business and regulatory requirements.
- Contribute to policies, procedures and standards.
- Support awareness, training, and management reporting activities.
- Assist in risk identification, assessment, monitoring and reporting.
- Maintain risk registers, treatment plans and follow‑up actions.
- Monitor mitigation actions and internal controls with stakeholders.
- Track remediation and continuous improvement initiatives.
- Support third‑party risk management, due diligence and contract review.
- Monitor third‑party risks, remediation actions and related follow‑up.
- Collaborate with Procurement, Legal, IT, Privacy and business teams.
- Maintain records of vendor assessments, contracts and approvals.
- Support compliance with regulations and frameworks (ISO, PCI‑DSS, NIS2, GDPR, NIST).
- Ass