Governance, Risk & Compliance (GRC) Specialist
Pubblicato il 17-09-2026 - Reply in Lucca
Overview
I candidati sono invitati a leggere attentamente tutti gli elementi di questo annuncio. La preghiamo di inviare la sua candidatura tempestivamente.
In this GRC Specialist role, you help manage complex IT contracts and strengthen the compliance framework for enterprise Supply Chain Execution software. You'll coordinate with Legal, Privacy & Security and cross-functional teams to align client needs with internal policies and data protection standards. You'll support GDPR, data security and regulatory requirements such as the AI Act, contributing to risk assessment and governance process improvements.
This position sits at the intersection of business, compliance and technology, offering visibility across stakeholders and a chance to shape governance as a business enabler. You'll engage in a fast-growing, international environment where we
Retribuzione / Benefits
- salary range 31,000–42,000 EUR gross per year
- CCNL Italian Metalworking Industry Agreement
- international and collaborative work environment
- flexible and innovative company culture
Responsabilità
- Support negotiation and lifecycle management of complex IT contracts related to LEA Reply platform
- Coordinate between client requirements and internal governance, policies and data protection standards
- Liaise with Legal and Privacy & Security to ensure GDPR and data protection compliance
- Support contractual risk assessment and ensure alignment with internal governance frameworks
- Contribute to evolution of internal governance and compliance processes
- Interact with corporate AI governance tools to support compliant business activities and workflows
Requisiti fondamentali
- Experience in contract management, compliance, or governance in IT or multinational environments
- Solid understanding of GDPR and data protection principles
- Familiarity with AI Act, Data Security frameworks, and ISO 27001 concepts is a plus xkiyazw
- Experience supporting negotiations in structured enterprise contexts
- Ability to balance legal rigor with business pragmatism
- Stakeholder management and ability to interact with business, legal, and technical teams
- Structured mindset, autonomy, willingness to grow in a governance role in tech environment
- Experience in Supply Chain or Industry 4.0 solutions is a plus
- Stakeholder management
- Cross-functional collaboration
- Autonomy and proactive mindset
- GDPR and data protection principles
- AI Act familiarity
- Data security frameworks