Cyber Security Compliance Consultant

Arsenalia; Mestre; On-site; EUR 35,000 - 50,000; Full time

Benefits offered by this job

Welfare Package

Worklife Kit

Career Path development program

Job summary

Arsenalia in Mestre, Italy, is looking for a cybersecurity consultant to support clients in compliance with key regulations. The role involves conducting assessments, designing security frameworks, and providing strategic guidance on cybersecurity.

The ideal candidate has 3-5 years of experience in cybersecurity consulting, knowledge of compliance standards, and excellent communication skills. Benefits include a comprehensive welfare package and opportunities for professional development.

Qualifications

• 3–5 years of experience in cybersecurity consulting or information security management.
• Strong knowledge of cybersecurity regulations including NIS2 and GDPR.
• Ability to design and implement security governance frameworks.

Responsibilities

• Support clients with compliance to cybersecurity regulations.
• Conduct assessments to identify risks and improvement opportunities.
• Develop cybersecurity policies and deliver training sessions.

Skills

Cybersecurity consulting

Compliance knowledge

Risk assessment

Communication skills

Stakeholder management

Education

Degree in Computer Science, Engineering, or Cybersecurity

Tools

Risk management frameworks

GRC platforms

Job description

Job Overview

Join a team of experts dedicated to delivering innovative solutions and driving digital transformation for our clients.

How you'll make a difference

• Support clients in achieving and maintaining compliance with cybersecurity regulations and standards such as NIS2, ISO/IEC 27001, TISAX, and GDPR.
• Conduct cybersecurity assessments, GAP analyses, and risk assessments to identify remediation actions and improvement opportunities.
• Design, implement, and maintain Information Security Management Systems (ISMS) aligned with international standards and best practices.
• Conduct security assessments, GAP analyses, Business Impact Analyses (BIA), and Risk Assessments to identify critical processes, operational impacts, continuity requirements, and remediation actions.
• Analyze business processes, operational dependencies, and critical systems to define business continuity parameters such as RTO, RPO, and MTPD.
• Manage consulting engagements related to audit readiness, certification support, and regulatory compliance programs.
• Act as a Virtual CISO (vCISO), providing strategic guidance on cybersecurity governance, risk management, and organizational security posture.
• Develop cybersecurity policies, procedures, standards, and governance documentation.
• Deliver training and awareness sessions on cybersecurity, compliance, and security best practices.
• Monitor regulatory and compliance developments, advising clients on emerging requirements and their operational impact.
• Work on high-impact cybersecurity and compliance projects.
• Collaborate with experienced consultants and international teams.
• Grow expertise across governance, risk, compliance, and cybersecurity domains.
• Collaborate with technical and business stakeholders to integrate cybersecurity into organizational processes and digital transformation initiatives.

What we’re looking for

• 3–5 years of experience in cybersecurity consulting, compliance, governance, or information security management.
• Strong knowledge of cybersecurity frameworks and regulations, including NIS2, ISO/IEC 27001, TISAX, GDPR.
• Proven experience in security audits, risk assessments, GAP analyses, compliance programs.
• Experience designing and implementing security governance frameworks and compliance processes.
• Knowledge of Business Continuity and Disaster Recovery principles and related methodologies such as ISO 22301, ISO/TS 22317.
• Strong analytical, organizational, and documentation skills.
• Excellent communication and stakeholder management capabilities.
• Ability to work independently and manage projects with varying timelines and priorities.
• Client‑oriented mindset with a methodical and detail‑focused approach.
• Availability to travel for short, medium, or long‑term assignments when required.
• English proficiency at B2 level or higher.

What we would consider a plus

• Degree in Computer Science, Engineering, Cybersecurity, Law, or a related field.
• Professional certifications such as ISO/IEC 27001 Lead Auditor, ISO/IEC 27001 Lead Implementer, CISA, CISM, CISSP.
• Previous experience as a Virtual CISO, Compliance Manager, or Information Security Manager.
• Familiarity with risk management and business continuity methodologies such as ISO 31000, ISO/IEC 27005, NIST Cybersecurity Framework, ISO 22301.
• Experience in regulated industries such as automotive, energy, manufacturing, healthcare, or financial services.
• Experience with GRC platforms and interactions with certification/accreditation bodies.
• Technical understanding of cloud security (AWS, Azure, GCP), SIEM and SOC environments, vulnerability management, network security architectures, identity and access management (IAM).

Benefits

We offer a comprehensive benefits package designed to support your professional growth, personal well-being, and work‑life balance.

• Welfare Package
• Worklife Kit
• Empowering People initiatives
• Open Space, Open Mind office environment
• Career Path development program
• Learning & Development opportunities

The gross annual salary for this position ranges from €35,000 to €50,000 and may be adjusted based on the candidate’s skills and experience beyond the required level. The role is covered by the CCNL Metalmeccanico Industria (CNEL code C011).