Cyber Security GRC Specialist

MSC Cruises; Italia; In loco; EUR 28.000 - 35.000; Tempo pieno

Vantaggi offerti da questo lavoro

Hybrid working model

Meal vouchers worth €8 per on-site working day

Welfare & Wellbeing initiatives

Descrizione del lavoro

MSC Cruises in Italy is seeking a Cyber Security Governance, Risk Management, Compliance Specialist to support their Cyber Security GRC team. This role involves overseeing governance activities and ensuring compliance with various frameworks.

The ideal candidate will have a relevant degree, good knowledge of Cyber Security principles, and experience in governance and risk management. The position offers a hybrid working model, a gross annual salary between €28,000 and €35,000, and meal vouchers.

Competenze

• English and Italian as primary working languages.
• Good understanding of Cyber Security principles.
• Ability to manage multiple activities, deadlines and stakeholders.

Mansioni

• Support implementation and maintenance of Cyber Security governance.
• Assist in risk identification and monitoring.
• Coordinate stakeholders for project delivery.

Conoscenze

Cyber Security principles

Project management

Communication skills

Analytical skills

Formazione

Degree in Cybersecurity, IT, Computer Science, Engineering, Law, Economics, Management or related fields

Strumenti

ServiceNow

Jira

Confluence

Microsoft SharePoint

Descrizione del lavoro

Job Purpose

MSC Group's Cruise Division is recruiting for its Cyber Security department a Cyber Security Governance, Risk Management, Compliance (GRC) Specialist.

The role is aimed at supporting the Cyber Security GRC team in the execution, coordination and monitoring of key governance, risk, compliance activities across MSC Group's Cruise Division.

A key focus of the role will be acting as Project Management Officer (PMO) of Cyber Security Department project initiatives, ensuring proper estimation, planning, monitoring and reporting of project activities and relating risks.

The ideal candidate will also support the implementation and continuous improvement of Cyber Security governance policies and procedures, as well as risk management and regulatory (e.g., NIS2, EU AI Act) compliance frameworks.

As a member of the Cyber Security GRC team, the candidate will contribute to strengthening the organization's security posture, and ensuring that Cyber Security activities are properly governed, monitored and reported.

Key Accountabilities

Cyber Security Governance risk and Compliance

• Support implementation and maintenance of the Cyber Security governance framework aligned with business and regulatory requirements.
• Contribute to policies, procedures and standards.
• Support awareness, training, and management reporting activities.
• Assist in risk identification, assessment, monitoring and reporting.
• Maintain risk registers, treatment plans and follow‑up actions.
• Monitor mitigation actions and internal controls with stakeholders.
• Track remediation and continuous improvement initiatives.
• Support third‑party risk management, due diligence and contract review.
• Monitor third‑party risks, remediation actions and related follow‑up.
• Collaborate with Procurement, Legal, IT, Privacy and business teams.
• Maintain records of vendor assessments, contracts and approvals.
• Support compliance with regulations and frameworks (ISO, PCI‑DSS, NIS2, GDPR, NIST).
• Assist in audit and certification evidence collection.
• Track compliance gaps, remediation actions and deadlines.
• Monitor regulatory developments and support impact assessments.
• Support planning, coordination and monitoring of Cyber Security projects and initiatives.
• Maintain project plans, status reports and documentation.
• Support dashboards, reporting and executive updates.
• Coordinate stakeholders for timely delivery of actions.

Qualifications

• English and Italian as primary working languages.
• Degree in Cybersecurity, Information Technology, Computer Science, Engineering, Law, Economics, Management or related fields.
• Good understanding of Cyber Security principles.
• Ability to manage multiple activities, deadlines and stakeholders.
• Ability to prepare clear status reports, action trackers, meeting minutes and executive summaries.
• Good communication and interpersonal skills, with the ability to collaborate effectively stakeholders.
• Analytical mindset and ability to identify issues, dependencies, risks and follow‑up actions.
• Relevant certifications in Cyber Security will be considered an advantage.
• Previous experience in Cyber Security governance, risk and compliance roles will be considered an advantage.
• Experience with tools such as ServiceNow, Jira, Confluence Microsoft SharePoint / Office 365 / Copilot / Purview will be considered an advantage.

Visa Requirements

Right to work in Italy.

What we Offer

• Hybrid working model: 2 days per week remotely
• Applicable Collective Labour Agreement (CCNL): "Addetti agli uffici ed ai terminals delle società di navigazione che esercitano l'armamento privato" - sez. personale di terra
• Gross annual salary (RAL): between €28,000 - €35,000 gross per year, paid over 14 monthly installments
• Meal vouchers: worth €8 per on‑site working day

Welfare & Wellbeing. We offer a range of Welfare & Wellbeing Initiatives as well as benefits including Productivity award, Learning opportunities, flexible working hours, Employee Assistance Programme, Discounts & Partnerships within the MSC group.

Our Commitment

We are committed to building a future that values diverse perspectives, embraces the world beyond borders, and fosters an inclusive environment where every individual feels valued, respected and empowered to be their authentic selves. Our commitment extends to taking meaningful, measurable actions that have a long‑term positive impact on our guests, our employees and our planet.