Information Security GRC Specialist

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/8p9cft

pbLocation: /bVia Melen 83, 16152 Genoa, Italy /ppbContract: /bFull-time, Permanent /ph3About Us /h3pGenerative Bionics is a deep-tech company building humanoid robot platforms to deploy human-centered Physical AI. We design intelligent, capable machines that work alongside people in real-world environments — developed in Genova, Italy. /ph3Role /h3pWe are looking for anb Information /b bSecurity GRC Specialist /b to strengthen our information security governance program and support the secure growth of our business, products, and technology ecosystem. The role will contribute to the development of a scalable governance framework covering corporate information security, product cybersecurity, regulatory compliance, risk management, and security-by-design principles across the organization. Working closely with engineering, technology, legal, operations, and business teams, the successful candidate will help ensure that security, privacy, resilience, and regulatory requirements are consistently integrated into company processes, products, and strategic initiatives. /ph3Responsibilities /h3ulliDevelop, maintain, and continuously improve the organization’s information security governance framework, risk assessment, processes, policies, standards, procedures, and control requirements; /liliMaintain knowledge of and support compliance with key regulations, standards, and frameworks applicable to a humanoid robotics manufacturer, including the EU Cyber Resilience Act, GDPR, EU AI Act, NIS2 Directive, EU Machinery Regulation, EU Data Act, ISO/IEC 27001, NIST Cybersecurity Framework, CIS Controls, IEC 62443, and other applicable product safety, connected-product, industrial cybersecurity, privacy, and supply-chain requirements; /liliTranslate regulation requirements into practical organizational, technical, and product security requirements; /liliTrack remediation plans, and monitor residual risk across business processes, IT environments, cloud services, products, and third parties; /liliDefine and monitor security performance and risk indicators (KPI, KRI), prepare management reporting, and elevate material issues to relevant governance forums; /liliSupport internal and external audits, security assessments, certification activities, and evidence collection, ensuring timely remediation of findings; /liliAdvise business, technology, engineering,



and operational teams on security requirements and support the integration of appropriate controls into projects, products, and processes; /liliSupport third-party security governance, including contractual security requirements, risk monitoring, and remediation follow-up; /liliSupport product cybersecurity governance activities by collaborating with engineering teams to ensure security-by-design principles, cybersecurity requirements, vulnerability management processes, and regulatory product security obligations are effectively implemented throughout the product lifecycle; /liliContribute to incident governance by supporting escalation, post-incident reviews, lessons learned, and the tracking of corrective actions; /liliPromote a strong security culture through awareness programs, targeted communications, training initiatives, and stakeholder engagement activities; /li /ulh3Requirements /h3ulliBachelor’s or master’s degree in a scientific or humanities discipline, or equivalent professional experience; /liliAt least 3 years of experience in information security governance, risk management, compliance, internal audit, or comparable cybersecurity functions; /liliSound understanding of information security, cybersecurity governance, risk management, and control frameworks such as ISO/IEC 27001, NIST Cybersecurity Framework, CIS Controls, or equivalent standards; /liliAbility to assess security risks, evaluate control effectiveness, identify gaps, and translate findings into pragmatic, risk-based recommendations; /liliAbility to understand, interpret, and operationalize cybersecurity, privacy, resilience, and product security regulations into practical governance processes and controls; /liliPractical experience in developing and maintaining security policies, standards, procedures, risk registers, control frameworks, and remediation plans; /liliExperience supporting audits, certifications,



regulatory assessments, and evidence collection activities; /liliStrong analytical, organizational, and documentation skills, with attention to detail and the ability to manage multiple priorities; /liliExcellent communication and stakeholder management skills, with the ability to explain security requirements clearly to both technical and non-technical audiences; /liliAbility to work effectively across business, technology, engineering, legal, compliance, and operational teams; /liliProfessional proficiency in English; /liliHigh standards of integrity, accountability, confidentiality, and professional judgment; /liliAvailability to travel nationally and internationally is expected; /li /ulh3Valued Extras /h3ulliExperience supporting ISO/IEC 27001 implementation and certification projects; /liliExperience in manufacturing, industrial automation, automotive, aerospace, IoT, embedded systems, or critical infrastructure environments; /liliFamiliarity with Secure Development Lifecycle (SDLC), vulnerability management, and product cybersecurity programs; /liliKnowledge of cloud governance and modern identity and access management concepts; /liliExposure to supplier security assessments and third-party risk management programs; /liliProfessional certifications such as ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, or equivalent; /li /ulh3We Offer /h3ulliThe opportunity to help build one of Europe's most ambitious humanoid robotics companies; /liliWork on cutting-edge technologies at the intersection of AI, robotics, software, electronics, and manufacturing; /liliA collaborative, multidisciplinary, and fast-paced, high-growth innovation-driven environment; /liliDirect exposure to strategic programs with tangible impact on product development and company growth; /liliConcrete opportunities for professional development and career advancement; /liliCompetitive compensation aligned with experience; /li /ulh3Disclaimer /h3pWe are proud to be an Equal Opportunity Employer. We evaluate all qualified applicants solely on the basis of merit and business needs, without distinction or discrimination based on gender, race, color, ethnic or social origin, age, religion, sexual orientation, gender identity, disability, or any other characteristic protected by law. /p #J-18808-Ljbffr

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/8p9cft