Chief Information Security Officer - Regional Expert

JR Italy; Casole d'Elsa; In loco; EUR 70.000 - 100.000; Tempo pieno

Descrizione del lavoro

A leading company in cybersecurity is seeking a Chief Information Security Officer to lead regional strategies in Casole d'Elsa, Italy. This role involves managing compliance with regulations, aligning cybersecurity with business goals, and conducting risk assessments. Candidates should possess significant experience in cybersecurity and demonstrate strong strategic planning skills.

Competenze

• 5+ years of experience in IT Audit, Risk Management, and/or Governance and Compliance.
• Experience developing a strategic cybersecurity plan blend business and cybersecurity objectives.
• Industry knowledge of security best practices including NIST CSF and ISO 27001.

Mansioni

• Ensure compliance with local and regional regulations like GDPR and NIS Directive.
• Act as liaison for regional regulatory bodies during audits.
• Develop and deliver region-specific cybersecurity training.

Conoscenze

Communication

Problem-Solving

Descrizione del lavoro

Social network you want to login/join with:

Chief Information Security Officer - Regional Expert, casole d'elsa

col-narrow-left

Client:

beBeeCybersecurity

Location:

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Reference:

250346123625601433633710

Job Views:

2

Posted:

02.07.2025

Expiry Date:

16.08.2025

col-wide

Job Description:

Job Title: Cybersecurity Strategist

Job Title: Cybersecurity Strategist

About the Role

We are seeking a seasoned cybersecurity professional to lead our regional cybersecurity strategy, ensuring alignment with local business needs and enterprise-wide security initiatives.

This role will work closely with IT and business leadership to identify, understand, and assess cyber risks, providing guidance and direction to system owners on risk mitigation strategies.

The successful candidate will also provide leadership to local resources while coordinating efforts with the enterprise cybersecurity team to support global goals and initiatives.

Main Responsibilities

• Compliance Management: Ensure adherence to local and regional regulations such as GDPR, NIS Directive, and other relevant EMEA cybersecurity and data privacy laws.
• Liaison and Communication: Act as the primary liaison for regional regulatory bodies during audits or inquiries.
• Policy Development: Provide feedback to the corporate team to refine enterprise policies based on regional experiences.
• Business Alignment: Partner closely with regional business leaders to align cybersecurity efforts with business objectives, ensuring security initiatives support and do not hinder growth.
• Technical Support: Provide consultative support for secure architecture and design in local IT and OT systems.
• Risk Assessment: Contextualize global threat information to local risks and vulnerabilities.
• Training and Awareness: Develop and deliver region-specific cybersecurity training for employees and contractors to ensure high levels of awareness and adherence to policies.
• Incident Response: Design and execute regular incident response exercises specific to regional risks and ensure alignment with global playbooks.
• Performance Metrics: Define and monitor key performance indicators (KPIs) for regional cybersecurity operations, tied to both local and global objectives.
• Continuous Improvement: Continuously assess and recommend improvements to regional cybersecurity capabilities to stay ahead of emerging threats.

Requirements

• Cybersecurity Experience: 5+ years of experience in IT Audit, Risk Management, and/or Governance and Compliance.
• Strategic Planning: Experience contributing to the development of a strategic cybersecurity plan, blending business and cybersecurity objectives.
• Audit and Compliance: Experience running external or internal audit, experience as a Compliance Manager coordinating with control owners and audit teams, and/or experience managing a security operations function.
• Industry Knowledge: Experience with industry security best practices and control frameworks, including but not limited to NIST CSF, ISO 27001, GDPR.

Skills and Qualifications

• Communication: Excellent communication and collaboration skills, with the ability to work effectively with stakeholders at all levels of the organization.
• Problem-Solving: Strong analytical and problem-solving skills, with the ability to identify potential risks and develop effective solutions.

Work Environment

Casole d'Elsa, Italy