Information Security GRC Specialist
Pubblicato il 18-10-2026 - Generative Bionics in Genova
About Us
Generative Bionics is a deep-tech company building humanoid robot platforms to deploy human-centered Physical AI. We design intelligent, capable machines that work alongside people in real-world environments — developed in Genova, Italy.
Role
We are looking for an Information Security GRC Specialist to strengthen our information security governance program and support the secure growth of our business, products, and technology ecosystem.The role will contribute to the development of a scalable governance framework covering corporate information security, product cybersecurity, regulatory compliance, risk management, and security-by-design principles across the organization.Working closely with engineering, technology, legal, operations, and business teams, the successful candidate will help ensure that security, privacy, resilience, and regulatory requirements are consistently integrated into company processes, products, and strategic initiatives.
Responsibilities
- - Develop, maintain,
and continuously improve the organization’s information security governance framework, risk assessment, processes, policies, standards, procedures, and control requirements;
- - Maintain knowledge of and support compliance with key regulations, standards, and frameworks applicable to a humanoid robotics manufacturer, including the EU Cyber Resilience Act, GDPR, EU AI Act, NIS2 Directive, EU Machinery Regulation, EU Data Act, ISO/IEC 27001, NIST Cybersecurity Framework, CIS Controls, IEC 62443, and other applicable product safety, connected-product, industrial cybersecurity, privacy, and supply-chain requirements;
- - Translate regulation requirements into practical organizational, technical, and product security requirements;
- - Track remediation plans, and monitor residual risk across business processes, IT environments, cloud services, products, and third parties;
- - Define and monitor security performance and risk indicators (KPI, KRI), prepare management reporting,