Cyber Security & GRC Specialist

Avvale; Milano; Ibrido; EUR 39.000 - 50.000; Tempo pieno

Vantaggi offerti da questo lavoro

Meal vouchers

Wellbeing initiatives (Wellhub)

Growth opportunities

Descrizione del lavoro

Avvale is seeking a mid-level Cyber Security Specialist to join our Security team in Italy. You will oversee security controls, support GRC processes, and coordinate with external service providers to maintain regulatory compliance and robust defence.

The ideal candidate has 3–5 years of relevant experience, strong knowledge of standards like ISO 27001 and NIST, and excellent communication skills. The role requires working from our headquarters 2–3 days per week, with opportunities for growth

Competenze

• 3–5 years of experience in similar roles such as Security Analyst, SecOps Specialist, or GRC Analyst.
• Solid technical foundation in security operations and governance, risk and compliance.
• Strong familiarity with GDPR, PCI-DSS, HIPAA (or equivalent), ISO 27001, and NIST.

Mansioni

• Oversee and monitor key security controls (XDR/EDR, Email Security Gateway, MDM, DNS Protection, DLP) and manage Level 2 activities.
• Support policy, standard, and procedure definitions to ensure regulatory compliance.
• Coordinate with MSSPs and internal teams; manage escalated alerts and assist in Incident Response remediation tracking.
• Contribute to Vulnerability Management by analyzing scans and prioritizing risks, following penetration tests or threat hunts.
• Assist in GRC and Third-Party Risk Management, reviewing policies and conducting supplier assessments.
• Support audits and collect evidence for compliance assessments and customer security reviews.
• Promote cybersecurity awareness through training, phishing simulations, and tracking participation.

Conoscenze

Security experience

GRC knowledge

SOC operations

Vulnerability management

Incident management

ITSM

Communication

English fluency

Descrizione del lavoro

Avvale is seeking a mid-level Cyber Security Specialist to join our Security team in Italy. You will oversee security controls, support GRC processes, and coordinate with external service providers to maintain regulatory compliance and robust defence.

The ideal candidate has 3–5 years of relevant experience, strong knowledge of standards like ISO 27001 and NIST, and excellent communication skills. The role requires working from our headquarters 2–3 days per week, with opportunities for growth