Cyber Security Compliance Consultant

Arsenalia Group; Venezia; On-site; EUR 35,000 - 50,000; Full time

Benefits offered by this job

Welfare package

Digital meal vouchers

Flexible reimbursement options

Career development programs

Open office spaces

Job summary

Arsenalia Group is seeking a cybersecurity consultant to help clients achieve and maintain compliance with major standards (NIS2, ISO 27001, TISAX, GDPR). You will perform risk assessments, design ISMS, and lead audit-readiness engagements.

Ideal candidates have 3–5 years in security consulting, strong regulatory knowledge, and experience with governance frameworks. Travel may be required; English proficiency at B2 or higher is expected.

Qualifications

• 3–5 years of experience in cybersecurity consulting, compliance, governance, or information security management.
• Strong knowledge of NIS2, ISO/IEC 27001, TISAX, GDPR.
• Proven experience in security audits, risk assessments, GAP analyses, and compliance programs.
• Experience designing and implementing security governance frameworks.
• Knowledge of Business Continuity and Disaster Recovery principles (ISO 22301, ISO/TS 22317).
• Strong analytical, organizational, and documentation skills.
• Excellent communication and stakeholder management capabilities.
• Ability to work independently and manage projects with varying timelines.
• Client-oriented mindset with a methodical and detail-focused approach.
• Willingness to travel for short-, medium-, or long-term assignments.
• English proficiency at B2 level or higher.

Responsibilities

• Support clients in achieving and maintaining compliance with cybersecurity regulations and standards such as NIS2, ISO/IEC 27001, TISAX, and GDPR.
• Conduct cybersecurity assessments, GAP analyses, and risk assessments to identify remediation actions and improvement opportunities.
• Design, implement, and maintain ISMS aligned with international standards and best practices.
• Conduct security assessments, GAP analyses, BIA, and Risk Assessments to identify critical processes and remediation actions.
• Analyze business processes, dependencies, and critical systems to define RTO, RPO, and MTPD.
• Manage consulting engagements related to audit readiness, certification support, and regulatory compliance programs.
• Act as a Virtual CISO (vCISO) providing strategic guidance on governance, risk management, and security posture.
• Develop cybersecurity policies, procedures, standards, and governance documentation.
• Deliver training and awareness sessions on cybersecurity and compliance.
• Monitor regulatory developments and advise clients on impact.
• Work on high-impact cybersecurity and compliance projects.
• Collaborate with experienced consultants and international teams.
• Grow expertise across governance, risk, compliance, and cybersecurity domains.
• Collaborate with technical and business stakeholders to embed cybersecurity into processes.

Skills

Cybersecurity consulting

Regulatory knowledge

Risk assessment

Regulatory compliance

Stakeholder management

Communication

Education

Degree in CS/Engineering/Cybersecurity/Law

Tools

GRC platforms

Cloud security (AWS/Azure/GCP)

Job description

What We ’re Looking For

Join a team of experts dedicated to delivering innovative solutions and driving digital transformation for our clients.

How you’ll make a difference

• Support clients in achieving and maintaining compliance with cybersecurity regulations and standards such as NIS2, ISO/IEC 27001, TISAX, and GDPR.
• Conduct cybersecurity assessments, GAP analyses, and risk assessments to identify remediation actions and improvement opportunities.
• Design, implement, and maintain Information Security Management Systems (ISMS) aligned with international standards and best practices.
• Conduct security assessments, GAP Analyses, Business Impact Analyses (BIA), and Risk Assessments to identify critical processes, operational impacts, continuity requirements, and remediation actions.
• Analyze business processes, operational dependencies, and critical systems in order to define business continuity parameters such as RTO, RPO, and MTPD.
• Manage consulting engagements related to audit readiness, certification support, and regulatory compliance programs.
• Act as a Virtual CISO (vCISO), providing strategic guidance on cybersecurity governance, risk management, and organizational security posture.
• Develop cybersecurity policies, procedures, standards, and governance documentation.
• Deliver training and awareness sessions on cybersecurity, compliance, and security best practices.
• Monitor regulatory and compliance developments, advising clients on emerging requirements and their operational impact.
• Work on high-impact cybersecurity and compliance projects.
• Collaborate with experienced consultants and international teams.
• Grow your expertise across governance, risk, compliance, and cybersecurity domains.
• Collaborate with technical and business stakeholders to integrate cybersecurity into organizational processes and digital transformation initiatives.

What we’re looking for

• 3–5 years of experience in cybersecurity consulting, compliance, governance, or information security management.
• Strong knowledge of cybersecurity frameworks and regulations, including: NIS2, ISO/IEC 27001, TISAX, GDPR.
• Proven experience in: Security audits, Risk assessments, GAP analyses, Compliance programs.
• Experience in designing and implementing security governance frameworks and compliance processes.
• Knowledge of Business Continuity and Disaster Recovery principles and related methodologies (e.g. ISO 22301, ISO/TS 22317).
• Strong analytical, organizational, and documentation skills.
• Excellent communication and stakeholder management capabilities.
• Ability to work independently and manage projects with varying timelines and priorities.
• Client-oriented mindset with a methodical and detail-focused approach.
• Availability to travel for short-, medium-, or long-term assignments when required.
• English proficiency at B2 level or higher.
• The gross annual salary for this position ranges from €35,000 to €50,000. It may be adjusted based on the candidate’s skills and experience beyond the required level.
• The role is covered by the CCNL Metalmeccanico Industria (CNEL code C011).

What we would consider a plus

• Degree in Computer Science, Engineering, Cybersecurity, Law, or a related field.
• Professional certifications such as: ISO/IEC 27001 Lead Auditor, ISO/IEC 27001 Lead Implementer, CISA, CISM, CISSP.
• Previous experience as a Virtual CISO, Compliance Manager, or Information Security Manager.
• Familiarity with risk management and business continuity methodologies such as: ISO 31000, ISO/IEC 27005, NIST Cybersecurity Framework, ISO 22301
• Experience in regulated industries such as automotive, energy, manufacturing, healthcare, or financial services.
• Experience with GRC platforms and interactions with certification/accreditation bodies.
• Technical understanding of: Cloud security (AWS, Azure, GCP), SIEM and SOC environments, Vulnerability management, Network security architectures, Identity and Access Management (IAM).

What we offer

• Welfare Package

  A comprehensive corporate welfare platform, offering a wide range of benefits and healthcare support.

• Worklife Kit

  A complete welcome package with all essentials for day-to-day productivity, complemented by comprehensive benefits. We offer digital meal vouchers and flexible reimbursement options to support both your work and personal needs.

• Empowering People

  Engagement initiatives, team building, and mentoring programs designed to foster integration, knowledge sharing, and meaningful connections.

• Open Space, Open Mind

  Modern open-space offices and collaborative areas that encourage interaction and teamwork.

• Career Path

  With our internal Changemaker Path methodology, you'll grow key relational, communication, and leadership skills, that will help you evolve in a way that truly fits you.

• Learning & Development

  Continuous improvement programs, certification opportunities, and incentives to help you grow both your soft and hard skills to unlock your full potential.

• Our Culture & Values

  At Arsenalia, we believe in creating an environment where innovation thrives, people grow, and everyone can make a meaningful impact.

  Redrawing the lines We value the courage to take risks and propose ambitious solutions because innovation starts where boundaries are redefined.

  In it, together Whether it’s a client or a teammate, we show up. With flexibility, commitment, and a can-do attitude, we support each other and tackle challenges side by side.

  Fresh minds and a drop of discovery Openness to change it’s part of who we are and how we find opportunities in the unexpected.

  Integrity and integration We foster a transparent, genuine workplace where authentic relationships fuel collective wellness, celebrating each person's unique individuality in an environment of free expression.