Cyber Security & GRC Specialist

Avvale; Lombardia; Hybrid; EUR 39,000 - 50,000; Full time

Benefits offered by this job

Meal vouchers

Wellbeing initiatives

Growth opportunities

Wellhub

Job summary

Avvale is seeking a mid-level Cyber Security Specialist to join our Security team. Reporting directly to the Security Manager, this role will govern our defence infrastructure and oversee compliance and data protection processes.

The ideal candidate has a solid technical foundation with hands-on experience in SOC operations, Incident Management, Vulnerability Management, and GRC. You will collaborate with MSSPs and internal IT teams, manage regulatory alignment (GDPR, ISO 27001, NIST), and

Qualifications

• 3–5 years of experience in similar roles such as Security Analyst, SecOps Specialist, or GRC Analyst.
• Practical experience with SOC operations, Incident Management processes, and the Vulnerability Management lifecycle.
• Good architectural understanding of modern security defenses for Endpoints, Email, Networks, and DLP technologies.
• Strong familiarity with GDPR, PCI-DSS, HIPAA (or equivalent), ISO 27001, and NIST.
• Knowledge of IT Service Management (ITSM) processes.
• Excellent communication skills with external vendors and internal IT teams.
• Fluent knowledge of the English language.

Responsibilities

• Oversee and monitor key corporate security controls (XDR/EDR, Email Security Gateway, MDM, DNS Protection, DLP) and manage Level 2 activities through ITSM/Ticketing systems.
• Support the Security Manager in defining, implementing, and monitoring security policies, standards, and procedures, ensuring compliance with frameworks and regulations such as ISO 27001, NIST, and GDPR.
• Coordinate operational activities with MSSPs and internal stakeholders, manage escalated alerts, and support Incident Response activities, including remediation tracking.
• Support Vulnerability Management activities by analysing scan results, prioritizing risks, and monitoring patching and remediation activities following Penetration Tests or Threat Hunting exercises.
• Contribute to GRC and Third-Party Risk Management activities, including reviewing Security Policies and SOPs, assessing vendors, and monitoring supply chain security posture.
• Support internal/external audits and assist in collecting the required documentation for compliance assessments and customer security reviews.
• Promote cybersecurity awareness across the organization through training initiatives, phishing simulation campaigns, and tracking employee and contractor participation.
• Support the Security Manager in drafting, reviewing, and continuously updating Security Policies and SOPs in line with major regulatory frameworks.
• Monitor the organization’s supply chain security posture through Cyber Threat Intelligence and Security Rating platforms, supporting Vendor Assessments through supplier questionnaire analysis and initial Gap Analysis activities.
• Support the completion of customer compliance questionnaires and assist in collecting evidence and documentation for internal and external audits.
• Contribute to promoting a cybersecurity‑aware culture across the organization through training initiatives and awareness programs.

Skills

Cyber security

GRC processes

SOC operations

Incident management

Vulnerability management

Regulatory compliance

English proficiency

Tools

ITSM tools

Threat intelligence tools

Job description

Avvale is seeking a mid-level Cyber Security Specialist to join our Security team. Reporting directly to the Security Manager, this role will govern our defence infrastructure and oversee compliance and data protection processes.

The ideal candidate has a solid technical foundation with hands-on experience in SOC operations, Incident Management, Vulnerability Management, and GRC. You will collaborate with MSSPs and internal IT teams, manage regulatory alignment (GDPR, ISO 27001, NIST), and