GRC & Compliance Lead for AI Infrastructure Security

Stealth Startup; Lombardia; On-site; EUR 65,000 - 102,000; Full time

Job summary

Stealth Startup is seeking a Cybersecurity GRC Manager to design and run the company’s information security governance, risk and compliance program. You will build our ISMS from scratch, own the certification roadmap, and drive the first certification with close collaboration with the Security Engineer.

You will report to the Director of Software Engineering and, as the company scales, it is a natural path toward CISO leadership. Italian and English fluency are required.

Qualifications

• Bachelor’s degree in CS, Engineering, Info Security, Law or equivalent.
• 7+ years in information security governance, risk and compliance in relevant sectors.
• Hands-on ISO/IEC 27001 certification experience end-to-end.
• Working knowledge of NIS2 and GDPR security requirements.
• Ability to understand cloud/infrastructure architectures well enough to challenge engineers.
• Fluent English and Italian.

Responsibilities

• Define and run the security governance, risk and compliance program (ISMS).
• Own the certification roadmap and lead audits.
• Manage incident notification procedures and regulatory reporting.
• Govern supplier and host-site security requirements in deployment agreements.
• Coordinate cross-functional teams (security, engineering, legal, operations).
• Prepare customers and regulators for due diligence and audits.

Skills

Security governance

Risk management

Compliance

Cloud/infrastructure understanding

Ownership/autonomy

English and Italian fluency

Education

Bachelor’s degree in CS/Engineering/Info Security/Law

Tools

ISO/IEC 27001 Lead Implementer

ISO/IEC 27001 Lead Auditor

CISM/CISSP or equivalent

Job description

Stealth Startup is seeking a Cybersecurity GRC Manager to design and run the company’s information security governance, risk and compliance program. You will build our ISMS from scratch, own the certification roadmap, and drive the first certification with close collaboration with the Security Engineer.

You will report to the Director of Software Engineering and, as the company scales, it is a natural path toward CISO leadership. Italian and English fluency are required.