Cybersecurity Compliance & vCISO Specialist

Arsenalia Group; Venezia; In loco; EUR 35.000 - 50.000; Tempo pieno

Vantaggi offerti da questo lavoro

Welfare package

Digital meal vouchers

Flexible reimbursement options

Career development programs

Open office spaces

Descrizione del lavoro

Arsenalia Group is seeking a cybersecurity consultant to help clients achieve and maintain compliance with major standards (NIS2, ISO 27001, TISAX, GDPR). You will perform risk assessments, design ISMS, and lead audit-readiness engagements.

Ideal candidates have 3–5 years in security consulting, strong regulatory knowledge, and experience with governance frameworks. Travel may be required; English proficiency at B2 or higher is expected.

Competenze

• 3–5 years of experience in cybersecurity consulting, compliance, governance, or information security management.
• Strong knowledge of NIS2, ISO/IEC 27001, TISAX, GDPR.
• Proven experience in security audits, risk assessments, GAP analyses, and compliance programs.
• Experience designing and implementing security governance frameworks.
• Knowledge of Business Continuity and Disaster Recovery principles (ISO 22301, ISO/TS 22317).
• Strong analytical, organizational, and documentation skills.
• Excellent communication and stakeholder management capabilities.
• Ability to work independently and manage projects with varying timelines.
• Client-oriented mindset with a methodical and detail-focused approach.
• Willingness to travel for short-, medium-, or long-term assignments.
• English proficiency at B2 level or higher.

Mansioni

• Support clients in achieving and maintaining compliance with cybersecurity regulations and standards such as NIS2, ISO/IEC 27001, TISAX, and GDPR.
• Conduct cybersecurity assessments, GAP analyses, and risk assessments to identify remediation actions and improvement opportunities.
• Design, implement, and maintain ISMS aligned with international standards and best practices.
• Conduct security assessments, GAP analyses, BIA, and Risk Assessments to identify critical processes and remediation actions.
• Analyze business processes, dependencies, and critical systems to define RTO, RPO, and MTPD.
• Manage consulting engagements related to audit readiness, certification support, and regulatory compliance programs.
• Act as a Virtual CISO (vCISO) providing strategic guidance on governance, risk management, and security posture.
• Develop cybersecurity policies, procedures, standards, and governance documentation.
• Deliver training and awareness sessions on cybersecurity and compliance.
• Monitor regulatory developments and advise clients on impact.
• Work on high-impact cybersecurity and compliance projects.
• Collaborate with experienced consultants and international teams.
• Grow expertise across governance, risk, compliance, and cybersecurity domains.
• Collaborate with technical and business stakeholders to embed cybersecurity into processes.

Conoscenze

Cybersecurity consulting

Regulatory knowledge

Risk assessment

Regulatory compliance

Stakeholder management

Communication

Formazione

Degree in CS/Engineering/Cybersecurity/Law

Strumenti

GRC platforms

Cloud security (AWS/Azure/GCP)

Descrizione del lavoro

Arsenalia Group is seeking a cybersecurity consultant to help clients achieve and maintain compliance with major standards (NIS2, ISO 27001, TISAX, GDPR). You will perform risk assessments, design ISMS, and lead audit-readiness engagements.

Ideal candidates have 3–5 years in security consulting, strong regulatory knowledge, and experience with governance frameworks. Travel may be required; English proficiency at B2 or higher is expected.