Cybersecurity GRC Consultant: Risk & Compliance

Upwork; San Donato Milanese; On-site; EUR 83,000 - 165,000; Part time

Job summary

COET srl is seeking an experienced Information Security professional to protect its information systems and data from cyber threats. The role collaborates with the Cybersecurity team to identify, assess, monitor, and report risks across the organization.

The consultant will work on governance, risk, compliance, and incident response, supporting audits and governance forums, with on-site presence in San Donato Milanese, Italy, at least 3 times per month.

Qualifications

• Experience in information security governance, risk management, compliance, and incident response.
• Knowledge of NIST, NIS2, ISO 27001 and GDPR.
• CISSP or CISM certification desirable.
• Fluency in Italian and English; strong communication and stakeholder management.

Responsibilities

• Perform cybersecurity risk assessments for COET srl.
• Analyze threats, vulnerabilities, control effectiveness, and residual risks.
• Maintain and update cybersecurity risk registers.
• Track risk mitigation and remediation activities through completion.
• Recommend improvements for Information Security operations.

Skills

InfoSec governance

Risk management

Incident response

Regulatory compliance

NIST/NIS2/ISO 27001

Fluent Italian

Fluent English

Education

CISSP

CISM

Job description

COET srl is seeking an experienced Information Security professional to protect its information systems and data from cyber threats. The role collaborates with the Cybersecurity team to identify, assess, monitor, and report risks across the organization.

The consultant will work on governance, risk, compliance, and incident response, supporting audits and governance forums, with on-site presence in San Donato Milanese, Italy, at least 3 times per month.