01 ott - Italia
Source Technology
Cybersecurity Governance, Risk & Compliance Consultant
Location: Milan, Italy
Work Model: Hybrid (3 days on-site per month in Milan)
Workload: 100%
We are seeking an experienced GRC Professional to support cybersecurity governance, risk management, compliance, and audit activities across its Italian operations.
Key Responsibilities
- Conduct cybersecurity risk assessments and maintain risk registers
- Assess security controls, vulnerabilities, and remediation plan
- Support cybersecurity governance, policy development, and risk reporting
- Assist with internal and external audits and regulatory compliance activities (NIS2, ISO 27001, GDPR, NIST)
- Develop management reporting, dashboards, and risk metrics
- Partner with IT, Security, Legal, Privacy, Procurement, and business stakeholders to drive cybersecurity best practices
Required Experience
- Strong background in Cybersecurity Governance, Risk & Compliance
- Experience performing security risk assessments and control reviews
- Knowledge of NIST, ISO 27001, NIS2, GDPR, or similar frameworks
- Experience supporting audits, compliance reviews, and remediation activities
- Fluent in Italian and English
- Relevant certifications such as CISSP, CISM, or CRISC are advantageous
We believe in equal opportunity for all and actively encourage applications from diverse backgrounds, experiences, and perspectives.
Source Group International Ltd is acting as an Employment Business in relation to this vacancy
J-18808-Ljbffr
02 ott - Empoli
Openjobmetis
02 ott - Lazio
Veolia | Italia
02 ott - Vidor
Eurointerim
02 ott - Catania
impiegando.com