Information Security Grc Specialist (F / m / d)

Awin; Milano; Ibrido; EUR 40.000 - 60.000; Tempo pieno

Descrizione del lavoro

A leading technology company in Milano is seeking an experienced Information Security GRC Specialist to enhance compliance with information security laws and industry standards. You will develop policies, coordinate audits, and support team initiatives. The ideal candidate has at least 2 years of experience in information security and relevant certifications. Flexible remote working and a supportive culture are provided.

Servizi

Company training programs

Remote working options

Peer-to-peer voucher program

Free drinks and snacks

Mental health initiatives

Competenze

• At least 2 years' experience in information security, focusing on GRC.
• Experience with the ISO 27001 standard.
• Certifications such as CISSP, CISA, CISM, CRISC, or equivalent are desirable.

Mansioni

• Ensure compliance with information security laws and standards.
• Develop and maintain compliance policies and procedures.
• Coordinate information security compliance audits.

Descrizione del lavoro

Purpose of Position

We are seeking an experienced and knowledgeable Information Security GRC Specialist to join our information security team.

The key responsibilities will be to support the team on improvement initiatives, support BAU activities, and enhance cross-functional and departmental collaboration.

Key Tasks

• Ensure compliance with relevant information security laws, regulations, and industry standards (e.g., GDPR, ISO 27001, PCI DSS).
• Develop and maintain information security compliance policies, procedures, and controls.
• Coordinate and oversee information security compliance audits and assessments against the ISO 27001 standard or contractual requirements.
• Keep abreast of regulatory changes and update information security compliance programs accordingly.
• Support and own the delivery of information security education and awareness.
• Monitor and report on cybersecurity metrics and KPIs.
• Review RFPs and contracts to ensure terms align with Awin's policies and standards.
• Further develop the Security Incident process, create incident response playbooks, and implement them into existing processes.
• Support the team with audits, risk management, and vendor onboarding.
• Coach and support junior team members in their areas of expertise.

Skills & Expertise

Professional Experience

• At least 2 years' experience in information security, focusing on GRC.
• Experience with the ISO 27001 standard and other relevant frameworks.
• Certifications such as CISSP, CISA, CISM, CRISC, or equivalent are highly desirable.
• Proficiency in Microsoft Office Suite.
• Experience with OneTrust is desirable.

Personal Skills

• Clear, concise, and engaging writing style.
• Attention to detail.
• Analytical and critical thinking skills.
• Adaptability and flexibility.
• Project management mindset.
• Excellent written and spoken English skills.

Our Offer

• Utilize our company training programs to enhance your knowledge on various topics.
• Work four days a week; the fifth day (to be agreed upon) can be used for training, development, completing work, or personal wellbeing, depending on team needs.
• Remote working options available in agreement with your manager.
• Participate in our peer-to-peer voucher program to thank colleagues.
• Enjoy free drinks and snacks from our coffee machines.
• Access mental health initiatives to support your wellbeing.

Established in 2000, Awin prides itself on a dynamic, social, and inclusive culture.

LI-MM1