28 ott - San Donato Milanese
Lifted, an Upwork Company™
h3Cybersecurity Governance, Risk Compliance (GRC) Consultant /h3ulliContract /li /ulpAn enterprise technology client is seeking an experienced bInformation Security Professional /b to support the protection of COET srl’s information systems and data from cybersecurity threats. /ppThe selected consultant will work closely with the company's Cybersecurity team to identify, assess, monitor, and report cybersecurity risks across the COET organization. /ppThis is a temporary, tempo parziale consulting opportunity based in Italy /ppThis opportunity is ideal for an experienced Information Security professional with knowledge of bcybersecurity governance, risk management, compliance, and incident response /b. /ph3What You’ll Do: /h3ulliConduct cybersecurity risk assessments for COET srl. /liliAnalyze threats, vulnerabilities, control effectiveness, and residual risks. /liliMaintain and update cybersecurity risk registers. /liliTrack risk mitigation and remediation activities through completion. /liliRecommend ways to improve the efficiency, consistency, and effectiveness of Information Security operations. /liliDevelop and monitor cybersecurity policies, standards, and control requirements. /liliReview risk assessments, mitigation plans, exceptions, and risk acceptance requests. /liliSupport cybersecurity governance forums and reporting activities. /liliAssist with internal and external cybersecurity audits. /liliCoordinate evidence collection and remediation tracking. /liliAssess compliance with company's Energy cybersecurity standards and applicable country regulations, including NIS2. /liliSupport control assessments and gap analyses. /liliPrepare materials for management and governance reviews.
/liliEscalate significant cybersecurity risks and emerging trends. /liliCollaborate with IT, Product Security, IAM, Legal, Procurement, Privacy, and business teams. /liliProvide guidance on cybersecurity risk management processes and requirements. /liliPromote cybersecurity awareness and risk-informed decision-making. /li /ulh3Qualifications: /h3ulliExperience in Information Security governance, risk management, compliance, and incident response. /liliKnowledge of common cybersecurity frameworks and regulations, such as NIST, NIS2, ISO 27001, and GDPR. /liliCISSP, CISM, or an equivalent certification is desirable. /liliFluency in both Italian and English. /liliStrong communication and stakeholder management skills. /liliAbility to work independently and collaborate with cybersecurity and business teams. /liliCybersecurity risk assessments and updated risk registers. /liliRisk mitigation and remediation tracking. /liliCybersecurity policies, standards, and control requirements. /liliAudit evidence, control assessments, and gap analysis support. /liliGovernance review materials and cybersecurity reporting. /li /ulh3Location Requirement /h3ulliOn-site presence at COET premises in bSan Donato Milanese, Italy /b, at least b3 times per month /b. /li /ulullibCategory: /b Information Security Compliance /lilibDuration: /b September 14, 2026 to September 14, 2027 /liliThe client is still evaluating the appropriate engagement structure. The selected talent may ultimately be engaged through an Employer of Record (EOR) arrangement rather than as an Independent Contractor. /liliCandidates should be comfortable proceeding under either engagement structure. If EOR is selected, additional onboarding requirements and timelines may apply before the engagement begins. /li /ul #J-18808-Ljbffr