Cyber Security Compliance Consultant

Arsenalia; Venezia; In loco; EUR 35.000 - 50.000; Tempo pieno

Vantaggi offerti da questo lavoro

Welfare Package

Worklife Kit

Career Path development program

Learning & Development opportunities

Descrizione del lavoro

Arsenalia in Venice, Italy, is seeking a Cybersecurity Consultant to support clients in compliance with various cybersecurity regulations such as NIS2 and GDPR. The role involves conducting assessments, designing security management systems, and advising clients on strategic security policies.

The ideal candidate will have 3–5 years of experience in cybersecurity consulting, strong analytical and communication skills, and proficiency in English (B2 level). We offer a diverse benefits package that promotes professional growth and work-life balance.

Competenze

• 3–5 years of experience in cybersecurity consulting and compliance.
• Strong knowledge of cybersecurity frameworks and regulations.
• Proven experience in security audits and risk assessments.

Mansioni

• Support clients in achieving compliance with cybersecurity regulations.
• Conduct security assessments and risk assessments.
• Act as a Virtual CISO providing strategic guidance on security.

Conoscenze

Cybersecurity compliance

Risk assessment

Analytical skills

Project management

Stakeholder management

Communication skills

Formazione

Degree in Computer Science or related field

Professional certifications (CISA, CISM, CISSP)

Descrizione del lavoro

Job Overview

Join a team of experts dedicated to delivering innovative solutions and driving digital transformation for our clients.

How you'll make a difference

• Support clients in achieving and maintaining compliance with cybersecurity regulations and standards such as NIS2, ISO/IEC 27001, TISAX, and GDPR.
• Conduct cybersecurity assessments, GAP analyses, and risk assessments to identify remediation actions and improvement opportunities.
• Design, implement, and maintain Information Security Management Systems (ISMS) aligned with international standards and best practices.
• Conduct security assessments, GAP analyses, Business Impact Analyses (BIA), and Risk Assessments to identify critical processes, operational impacts, continuity requirements, and remediation actions.
• Analyze business processes, operational dependencies, and critical systems to define business continuity parameters such as RTO, RPO, and MTPD.
• Manage consulting engagements related to audit readiness, certification support, and regulatory compliance programs.
• Act as a Virtual CISO (vCISO), providing strategic guidance on cybersecurity governance, risk management, and organizational security posture.
• Develop cybersecurity policies, procedures, standards, and governance documentation.
• Deliver training and awareness sessions on cybersecurity, compliance, and security best practices.
• Monitor regulatory and compliance developments, advising clients on emerging requirements and their operational impact.
• Work on high-impact cybersecurity and compliance projects.
• Collaborate with experienced consultants and international teams.
• Grow expertise across governance, risk, compliance, and cybersecurity domains.
• Collaborate with technical and business stakeholders to integrate cybersecurity into organizational processes and digital transformation initiatives.

What we’re looking for

• 3–5 years of experience in cybersecurity consulting, compliance, governance, or information security management.
• Strong knowledge of cybersecurity frameworks and regulations, including NIS2, ISO/IEC 27001, TISAX, GDPR.
• Proven experience in security audits, risk assessments, GAP analyses, compliance programs.
• Experience designing and implementing security governance frameworks and compliance processes.
• Knowledge of Business Continuity and Disaster Recovery principles and related methodologies such as ISO 22301, ISO/TS 22317.
• Strong analytical, organizational, and documentation skills.
• Excellent communication and stakeholder management capabilities.
• Ability to work independently and manage projects with varying timelines and priorities.
• Client‑oriented mindset with a methodical and detail‑focused approach.
• Availability to travel for short, medium, or long‑term assignments when required.
• English proficiency at B2 level or higher.

What we would consider a plus

• Degree in Computer Science, Engineering, Cybersecurity, Law, or a related field.
• Professional certifications such as ISO/IEC 27001 Lead Auditor, ISO/IEC 27001 Lead Implementer, CISA, CISM, CISSP.
• Previous experience as a Virtual CISO, Compliance Manager, or Information Security Manager.
• Familiarity with risk management and business continuity methodologies such as ISO 31000, ISO/IEC 27005, NIST Cybersecurity Framework, ISO 22301.
• Experience in regulated industries such as automotive, energy, manufacturing, healthcare, or financial services.
• Experience with GRC platforms and interactions with certification/accreditation bodies.
• Technical understanding of cloud security (AWS, Azure, GCP), SIEM and SOC environments, vulnerability management, network security architectures, identity and access management (IAM).

Benefits

We offer a comprehensive benefits package designed to support your professional growth, personal well-being, and work‑life balance.

• Welfare Package
• Worklife Kit
• Empowering People initiatives
• Open Space, Open Mind office environment
• Career Path development program
• Learning & Development opportunities

The gross annual salary for this position ranges from €35,000 to €50,000 and may be adjusted based on the candidate’s skills and experience beyond the required level. The role is covered by the CCNL Metalmeccanico Industria (CNEL code C011).