GRC Security Consultant: Risk, Compliance & Governance

Lifted, An Upwork Company; Bardi; In loco; EUR 60.000 - 90.000; Tempo pieno

Descrizione del lavoro

Lifted, An Upwork Company is seeking an experienced Information Security professional to lead governance, risk management, compliance, and incident response activities in Italy. The role is based on-site in San Donato Milanese, Lombardy, with collaboration across IT, Product Security, IAM, Legal, Procurement, Privacy and business teams.

You will run cybersecurity risk assessments for COET srl, maintain risk registers, monitor remediation, develop policies and controls, and support audits and

Competenze

• Experience in Information Security governance, risk management, compliance, and incident response.
• Knowledge of NIST, NIS2, ISO 27001, and GDPR.
• CISSP, CISM or equivalent certification desirable.
• Fluency in Italian and English.
• Strong communication and stakeholder management skills.
• Ability to work independently and collaborate with cybersecurity and business teams.
• Cybersecurity risk assessments and updated risk registers.
• Risk mitigation and remediation tracking.
• Cybersecurity policies, standards, and control requirements.
• Audit evidence, control assessments, and gap analysis support.
• Governance review materials and cybersecurity reporting.

Mansioni

• Conduct cybersecurity risk assessments for COET srl.
• Analyze threats, vulnerabilities, control effectiveness, and residual risks.
• Maintain and update cybersecurity risk registers.
• Track risk mitigation and remediation activities through completion.
• Recommend improvements to Information Security operations.
• Develop and monitor cybersecurity policies, standards, and control requirements.
• Review risk assessments, mitigation plans, exceptions, and risk acceptance requests.
• Support cybersecurity governance forums and reporting activities.
• Assist with internal and external cybersecurity audits.
• Coordinate evidence collection and remediation tracking.
• Assess compliance with Hitachi Energy cybersecurity standards and applicable country regulations, including NIS2.
• Support control assessments and gap analyses.
• Prepare materials for management and governance reviews.
• Escalate significant cybersecurity risks and emerging trends.
• Collaborate with IT, Product Security, IAM, Legal, Procurement, Privacy, and business teams.
• Provide guidance on cybersecurity risk management processes and requirements.
• Promote cybersecurity awareness and risk-informed decision-making.

Conoscenze

cybersecurity governance

risk management

compliance

incident response

stakeholder management

communication

policy development

Descrizione del lavoro

Lifted, An Upwork Company is seeking an experienced Information Security professional to lead governance, risk management, compliance, and incident response activities in Italy. The role is based on-site in San Donato Milanese, Lombardy, with collaboration across IT, Product Security, IAM, Legal, Procurement, Privacy and business teams.

You will run cybersecurity risk assessments for COET srl, maintain risk registers, monitor remediation, develop policies and controls, and support audits and