Cyber Security & Privacy Consultant

Advantio; Milano; In loco; EUR 50.000 - 70.000; Tempo pieno

Descrizione del lavoro

A leading cybersecurity consulting firm in Milan is seeking an experienced Security Consultant to deliver high-quality consultancy services. The role involves advising clients on compliance with standards such as ISO 27001 and GDPR, conducting risk assessments, and mentoring junior consultants. Ideal candidates will have a degree in a relevant field or equivalent experience, alongside fluency in English and Italian. Join a team dedicated to providing effective cybersecurity solutions.

Competenze

• Degree level qualification in a relevant field or 5 years' experience in information security.
• Minimum 2 years experience in consultative engagements using risk management frameworks.
• Ability to document complex business processes.

Mansioni

• Perform strategic consultancy services to identify customer needs.
• Lead cybersecurity maturity assessments and gap analysis engagements.
• Mentor and train junior colleagues on security best practices.

Conoscenze

Fluency in English and Italian

Experience in information security

Communication of security concepts

Knowledge of GDPR regulation

Business Continuity expertise

Formazione

Degree in Computer Science or related field

ISO 27001 lead auditor qualification

Strumenti

ISO / IEC 27001

NIST CSF

Descrizione del lavoro

About Advantio

Established in 2009, Advantio maintains an extensive team of consultants and security testing experts to provide digital security and assurance to its customers. Originally established as a payment compliance market leader, Advantio has grown from an established and leading payment security and compliance organisation in Europe to develop its comprehensive Cyber Security and Managed Security Services expertise - offering consultancy, products, and services to support organisations to first understand or their own cyber security related business risks and then by providing suitable and affordable solutions to manage those risks effectively and to remediate against threats proportionately. Advantio primarily serves the FinTech and Payment Card industries and is recognised by VISA as one of Europe’s top Qualified Security Assessor (QSA) providers.

Role Mission

We are seeking an experienced Security Consultant to join our team to help ensure the delivery of Advantio’s consultancy, products and services, ensuring optimal quality and value to customers.

Key Responsibilities

• Perform strategic consultancy services through identification of customer needs and scoping security solutions.
• Provide additional customer support to achieve compliance / certification against recognised standards such as ISO 27001, the GDPR and Advantio’s Cybersecurity Maturity Assessment.
• Independently conduct ISO / IEC 27001 implementation and audit activities.
• Lead Advantio Cybersecurity Maturity Assessment and Gap Analysis engagements.
• Conduct information asset discovery workshops and engagements.
• Conduct risk assessment workshops and engagements.
• Drive business continuity scenario tabletop exercises.
• Deliver external stakeholder training and awareness presentations.
• Mentor and train junior colleagues using expertise and experience.
• Define the scope of planned activities through review of available documentation and resources, including stakeholder interviews.
• Develop and deliver customer presentations to relay findings, recommendations, and progress reports.
• Attend customer meetings to review progress on longer term engagements and ensure that stakeholder expectations are being met.
• Provide support, advice and guidance when supervising or working with junior consultants.
• Provide support to Advantio’s internal compliance stakeholders to help ensure Advantio continues to successfully retain its ISO 27001 certification, or any other designated certifications.

Skills & Knowledge

• Degree level qualification in Computer Science, Computer Engineering, IT, Cyber Security, or a related field - or 5 years’ experience working within an information security role
• Fluency in both verbal and written English and Italian.
• Demonstrable experience communicating complex information security concepts to top level (C suite and above) management.
• Minimum 2 years experience in delivering consultative engagements using well known risk management and data security frameworks, standards, and methodologies.
• An aptitude for understanding and documenting complex business processes.
• A working knowledge of information governance concepts, including that of information assets, information asset ownership and data protection.
• The ability to develop high quality presentations, policies, and operating procedures.
• Ability to translate activities into easy-to-follow flow charts and processes.
• Experience in the following areas of information assurance :
• GDPR regulation
• ISO / ISEC 27001
• Business Continuity
• Supplier Management
• Incident Management
• Physical Security
• ISO 27001 lead auditor or lead implementer qualification.

Nice To Have

• Understanding of Strategic Information Assurance and an ability to draft cyber security strategies.
• Experience with secure development frameworks.
• Exposure to multiple information security frameworks, for example : NIST CSF.
• A cloud-based information security qualification, such as CCSK or equivalent.
• Basic knowledge of computer networks (Firewall, Switch, router, OSI model, etc.).
• CISMP or equivalent qualification.
• CISM or CISSP qualification.
• Fluency in both verbal and written Spanish.

Core Competencies

• Planning and organisation.
• Analysis and problem solving.
• Attention to detail.
• Results orientation.
• Learning attitude.
• Time management.
• Task / goal oriented.
• Teamwork attitude.
• Customer orientation.

Advantio Core Values

• Harmony, always strive to create harmony
• Openness, always be open
• Social responsibility, be socially responsible
• Timeless, whatever you build make it timeless
• Accommodating, make our customers feel at home
• Learning, be a learn it all
• Delivering results