Information Security Expert

Experteer Italy; Cusano Milanino; Ibrido; EUR 90.000 - 130.000; Tempo pieno

Vantaggi offerti da questo lavoro

Flexible work environment

International growth opportunities

Teamwork that matters

Safe and stable environment

Descrizione del lavoro

Kuehne+Nagel is seeking a Senior Specialist / Project Manager Information Security Manager to lead governance, risk, and compliance efforts across the organization, strengthening cybersecurity and regulatory posture. You will drive NIS2 implementation, partner with IT, Legal, Compliance, and regional security teams to promote a resilient security culture.

The role focuses on risk assessments, incident coordination, and third-party security to support secure operations for global logistics.

Competenze

• Degree in Information Security, Computer Science, Engineering, Law/Compliance or equivalent professional experience.
• Proven experience in Information Security Governance, Risk & Compliance (GRC) or related security functions.
• Experience implementing security frameworks and regulatory requirements (NIS2, ISO 27001, NIST CSF, or CIS Controls).
• Strong knowledge of information security risk management, ISMS processes, and audit readiness.

Mansioni

• Lead the implementation of NIS2 requirements with gap assessments, remediation plans, and ongoing monitoring.
• Establish and maintain information security governance, policies, and controls aligned with Global and EMEA standards.
• Conduct security risk assessments, manage risk treatment plans, and monitor control effectiveness.
• Coordinate security incident management and regulatory reporting with IT, Legal, Compliance, and cybersecurity teams.
• Support internal and external audits and regulatory inspections with timely remediation of findings.
• Drive third-party and supply chain security risk management including supplier assessments and due diligence.
• Define, monitor, and report security KPIs and risk metrics to local leadership and EMEA Information Security.
• Deliver security awareness initiatives and promote a cybersecurity culture across the organization.

Conoscenze

GRC leadership

NIS2 implementation

Project management

Risk assessment

Audit readiness

Third-party risk

Information security governance

Security frameworks

English proficiency

Italian proficiency

Formazione

Degree in Information Security, Computer Science, Engineering, Law/Compliance

Descrizione del lavoro

Specialista Senior / Project Manager

As Information Security Manager at Kuehne+Nagel, you lead governance, risk, and compliance efforts to strengthen cybersecurity and regulatory posture. You will drive NIS2 implementation, partner with IT, Legal, Compliance, and regional security teams, and promote a resilient security culture across the organization. You tackle risk assessments, incident coordination, and third-party security, shaping secure operations for global logistics. This is an opportunity to impact how we protect critical systems and enable trustworthy service delivery.

• safe and stable environment
• international growth opportunities
• teamwork that matters
• flexible work environment
• Lead the implementation of NIS2 requirements with gap assessments, remediation plans, and ongoing monitoring
• Establish and maintain information security governance, policies, and controls aligned with Global and EMEA standards
• Conduct security risk assessments, manage risk treatment plans, and monitor control effectiveness
• Coordinate security incident management and regulatory reporting with IT, Legal, Compliance, and cybersecurity teams
• Support internal and external audits and regulatory inspections with timely remediation of findings
• Drive third-party and supply chain security risk management including supplier assessments and due diligence
• Define, monitor, and report security KPIs and risk metrics to local leadership and EMEA Information Security
• Deliver security awareness initiatives and promote a cybersecurity culture across the organization
• Degree in Information Security, Computer Science, Engineering, Law/Compliance, or equivalent professional experience
• Proven experience in Information Security Governance, Risk & Compliance (GRC) or related security functions
• Experience implementing security frameworks and regulatory requirements (NIS2, ISO 27001, NIST CSF, or CIS Controls)
• Strong knowledge of information security risk management, ISMS processes, and audit readiness
• Good understanding of security domains: vulnerability management, IAM, SIEM, endpoint security, network security, backup and recovery, encryption
• Excellent stakeholder management, communication, and project management skills for technical and non-technical audiences
• Relevant certifications such as CISSP, CISM, CRISC, or ISO 27001 Lead Implementer/Auditor are advantageous
• Fluent English and professional Italian required