GRC Manager: ISO27001 & NIS2 Lead — Milan (Equity)

Stealth Startup AI infrastructure; Lombardia; On-site; EUR 65,000 - 102,000; Full time

Job summary

Stealth Startup AI infrastructure, an early-stage technology company in the Energy and AI infrastructure space, seeks a Cybersecurity GRC Manager to build our security governance, risk and compliance program. You will own the ISMS from scratch, drive a certification roadmap, and prepare the company for its first audit, working closely with security engineers and Legal.

The role offers high ownership and a clear path toward a CISO position as the company scales, with a focus on European and

Qualifications

• Bachelor’s degree in Computer Science, Engineering, Information Security, Law or equivalent field
• 7+ years of experience in information security governance, risk and compliance
• Hands-on experience taking an organization through ISO/IEC 27001 certification
• Working knowledge of NIS2 and GDPR security requirements
• Ability to understand cloud and infrastructure architectures
• Ability to work in a fast-paced, early-stage environment with ownership
• Fluent English and Italian

Responsibilities

• Define and own the information security program, including policies, risk management and statements of applicability
• Own the certification roadmap and lead implementation of selected certifications
• Manage compliance with NIS2 and GDPR security obligations and define license policy with Legal
• Plan audits, gather evidence and track remediation for audit readiness
• Oversee incident management workflow, regulatory notifications and customer communications
• Lead third-party and supply-chain security activities and contract security clauses
• Respond to customer security due diligence and report security posture to management

Skills

Security governance

Risk management

Compliance

Incident management

Leadership

Cloud & infra architecture

Ownership/autonomy

Fluent English

Fluent Italian

Education

Bachelor’s degree in Computer Science, Engineering, Information Security, Law or equivalent field

Tools

ISO/IEC 27001 Lead Implementer

ISO/IEC 27001 Lead Auditor

CISM

CISSP

Job description

Stealth Startup AI infrastructure, an early-stage technology company in the Energy and AI infrastructure space, seeks a Cybersecurity GRC Manager to build our security governance, risk and compliance program. You will own the ISMS from scratch, drive a certification roadmap, and prepare the company for its first audit, working closely with security engineers and Legal.

The role offers high ownership and a clear path toward a CISO position as the company scales, with a focus on European and