Cybersecurity Governance, Risk
Pubblicato il 05-10-2026 - SmartRecruiters in Italia
Cybersecurity Governance, Risk & Compliance (GRC) Consultant
- Contract
An enterprise technology client is seeking an experienced Information Security Professional to support the protection of COET srl’s information systems and data from cybersecurity threats.
The selected consultant will work closely with the company's Cybersecurity team to identify, assess, monitor, and report cybersecurity risks across the COET organization.
This is a temporary, tempo parziale consulting opportunity based in Italy
This opportunity is ideal for an experienced Information Security professional with knowledge of cybersecurity governance, risk management, compliance, and incident response .
What You’ll Do:
- Conduct cybersecurity risk assessments for COET srl.
- Analyze threats, vulnerabilities, control effectiveness, and residual risks.
- Maintain and update cybersecurity risk registers.
- Track risk mitigation and remediation activities through completion.
- Recommend ways to improve the efficiency, consistency, and effectiveness of Information Security operations.
- Develop and monitor cybersecurity policies, standards, and control requirements.
- Review risk assessments, mitigation plans, exceptions, and risk acceptance requests.
- Support cybersecurity governance forums and reporting activities.
- Assist with internal and external cybersecurity audits.
- Coordinate evidence collection and remediation tracking.
- Assess compliance with company's Energy cybersecurity standards and applicable country regulations, including NIS2.
- Support control assessments and gap analyses.
- Prepare materials for management and governance reviews.
- Escalate significant cybersecurity risks and emerging trends.
- Collaborate with IT, Product Security, IAM, Legal, Procurement, Privacy, and business teams.
- Provide guidance on cybersecurity risk management processes and requirements.
- Promote cybersecurity awareness and risk-informed decision-making.
- Experience in Information Security governance, r