Information Security Governance Lead: ISO 27001 & NIS2 Expert

Sisal; Bardi; On-site; EUR 75,000 - 110,000; Full time

Benefits offered by this job

Supplemental health insurance

Diversity & Inclusion initiatives

Well-Being Support

Parental Leave Packages

Job summary

Sisal in Emilia-Romagna invites an Information Security Governance Lead Specialist to drive ISO 27001, NIS2 and WLA compliance across Flutter SEA brands. You will coordinate governance, support audits, certifications, and regulatory inspections while aligning controls with business priorities.

You’ll partner with cross-border teams, develop governance metrics and dashboards, promote security awareness, and remediate audit findings.

Qualifications

• 5+ years of experience in Information Security Governance and Compliance.
• Strong knowledge of ISO 27001, NIS2, WLA requirements and related frameworks.
• Experience in managing audits, certifications and remediation programs.
• Strong stakeholder management, communication and influencing skills.
• Project coordination, analytical and problem-solving capabilities.

Responsibilities

• Coordinate ISO 27001, NIS2, and WLA compliance across Flutter SEA brands.
• Support audits, certifications, assessments and regulatory inspections.
• Maintain and improve security policies, standards and governance processes.
• Monitor regulatory developments and coordinate control implementations.
• Coordinate remediation of internal audit findings with owners.
• Promote information security awareness training across the group.
• Develop governance metrics, dashboards and executive reporting.

Skills

Information security

Governance

Compliance

ISO 27001

NIS2

WLA

Audits & certifications

Stakeholder management

Communication

Project coordination

Analytical thinking

Job description

Sisal in Emilia-Romagna invites an Information Security Governance Lead Specialist to drive ISO 27001, NIS2 and WLA compliance across Flutter SEA brands. You will coordinate governance, support audits, certifications, and regulatory inspections while aligning controls with business priorities.

You’ll partner with cross-border teams, develop governance metrics and dashboards, promote security awareness, and remediate audit findings.