Cyber Risk Specialist

MSC Mediterranean Shipping Company; Torino; In loco; EUR 45.000 - 75.000; Tempo pieno

Vantaggi offerti da questo lavoro

Learning opportunities

Welfare system

Life and health insurance

Modern workstation

Discounts within MSC group

Descrizione del lavoro

MSC Technology Italy seeks a Cybersecurity Compliance Analyst to support governance, risk, compliance and audit across MSC Cargo's entities. You will assist with compliance against NIS2, ISO 27001, ISO 22301 and related standards.

This role offers cross‑country collaboration, development of audit evidence, and a path to grow in a global tech division within MSC.

Competenze

• Understanding of NIS2 and ISO 27001/22301 standards.

Mansioni

• Compliance activities: identify gaps, track remediation, maintain documentation and evidence.

Conoscenze

NIS2 Directive

ISO 27001

ISO 22301

AI Act

Cybersecurity frameworks

Analytical thinking

Organizational skills

Detail oriented

Multitasking

Teamwork

Willingness to learn

Descrizione del lavoro

MSC Mediterranean Shipping Company is a global business engaged in the shipping sector. Present in 155 countries, MSC facilitates international trade between the world’s major economies, and among emerging markets across all continents. Headquartered in Geneva, Switzerland, since 1978, MSC is a privately‑owned organisation driven by the Aponte family. Today, we continue to focus on caring for customers, employees and the environment.

From a one‑vessel operation to a globally respected business we have an unfaltering commitment to people that have passion, creativity and willing to make a change.

MSC Technology Italy is the first division located in the national territory, complementing existing offices in Geneva (the Group's headquarters), Warren (New Jersey, USA), and Chennai (India).

MSC Technology embodies Passion and a commitment to Continuous Evolution, strongly believing in Equal Opportunities and Caring for its People—ultimately fostering a sense of Family within the Company.

With over 3,000 employees, our Technology Department plays a pivotal role in driving business growth and elevating the quality standards across our functional lines.

Working within an international office and engaging in cross‑country collaboration offers the opportunity to connect with individuals boasting diverse technical skills, backgrounds, cultures, and professional experiences. International travel not only enriches your understanding of business and languages within the ICT realm but also provides avenues for personal and professional growth.

In 2020, MSC Technology Italy was established as a technological division of MSC with the goal of creating a Center of Excellence to support the MSC Group's business.

Do you recognize yourself? Then come work with us and be part of MSC’s family!

Within the Security Architecture department, the Cybersecurity Compliance Analyst supports MSC Cargo's cybersecurity governance, compliance, certification, and audit initiatives across global legal entities.

The role will assist the Cybersecurity Risk & Compliance team in maintaining compliance with:

• NIS2 Directive compliance across European entities
• ISO/IEC 27001 Information Security Management System (ISMS)
• ISO/IEC 22301 Business Continuity Management System (BCMS)
• Internal audit execution and evidence collection
• Compliance gap assessments and remediation tracking
• Certification scope extensions across MSC entities

This position is designed for candidates seeking to build a career in Cybersecurity Governance, Risk, Compliance, and Audit.

Key responsibilities

Compliance Activities

Support compliance assessments against NIS2, ISO standards, and internal requirements.

• Assist in identifying compliance gaps.
• Support remediation tracking activities.
• Maintain compliance documentation and evidence repositories.
• Follow‑up with entity representatives for required information.
• Support consistent execution of security governance practices, processes, and standards across all MSC subsidiaries.

Internal Audit Support

• Plan and coordinate audit interviews.
• Collect and organize audit evidence.
• Review documentary evidence against control requirements.
• Track audit findings and corrective actions.
• Assist with preparation of management reports.

Requirements

• Knowledge of one or more of:
• NIS2 Directive
• ISO 27001
• ISO 22301
• AI Act
• Cybersecurity frameworks
• Strong analytical thinking
• Excellent organizational skills
• Detail oriented
• Ability to manage multiple activities simultaneously
• Team‑oriented mindset
• Strong willingness to learn

Diversity and Inclusion

This job posting is open to all individuals, regardless of gender, age, ethnic origin, nationality, sexual orientation, gender identity, disability, or any other personal characteristic, in compliance with applicable laws and regulations on equal opportunities and inclusion (Italian Legislative Decree No. 198/2006, as subsequently amended, and Italian Legislative Decrees No. 215/2003 and No. 216/2003).

In compliance with applicable pay transparency legislation, we provide the following information regarding the initial remuneration envisaged for this position.

The position will be classified within the Employee category, at one of the C2, C3, B1 or B2 levels under the Italian Metalworking Industry National Collective Bargaining Agreement (CCNL Metalmeccanico Industria).

The classification level and any additional remuneration components supplementing the base salary will be determined based on an assessment, carried out during the selection process, of objective and neutral criteria such as, by way of example, the candidate’s professional experience, technical skills, level of autonomy and the responsibilities required by the role.

What we offer

We offer a range of benefits including new Learning opportunities, a comprehensive Welfare System, Life and Health Insurance, Modern Workstation and Discounts within the MSC group.

Moreover, MSC Technology Italy fosters a culture of innovation and wellbeing by simultaneously pursuing various initiatives. These include Meetups, Technical and General Events such as Gaming Tournaments, Company Charity Initiatives and a Sustainability program designed to benefit all employees.

Our Company provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics.