Information Security Manager — NIS2 & GRC Leader

Kuehne+Nagel; Italia; In loco; EUR 90.000 - 120.000; Tempo pieno

Descrizione del lavoro

Kuehne+Nagel is seeking an Information Security Manager to lead governance, risk and compliance initiatives and strengthen the cybersecurity posture across global systems and operations.

You will collaborate with IT, Legal, Compliance and the EMEA Information Security organization to ensure regulatory compliance, reduce cyber risks, and promote a resilient security culture throughout the organization.

Competenze

• Degree in Information Security, Computer Science, Engineering, Law/Compliance or equivalent professional experience.
• Proven experience in Information Security Governance, Risk & Compliance (GRC) and related security functions.
• Experience implementing security frameworks and regulatory requirements (NIS2, ISO 27001, NIST CSF, CIS Controls).
• Strong knowledge of information security risk management, ISMS processes, and audit readiness.
• Good understanding of cybersecurity domains: vulnerability management, IAM, SIEM, endpoint security, network security, backup and recovery, encryption.
• Excellent stakeholder management, communication, and project management, capable of engaging technical and non-technical audiences.
• Certifications such as CISSP, CISM, CRISC, or ISO 27001 Lead Implementer/Auditor are advantageous.
• Fluent English and professional Italian are required.

Mansioni

• Lead the implementation of NIS2 requirements, gap assessments, remediation plans and compliance monitoring.
• Establish and maintain information security governance, policies and controls aligned with Global and EMEA standards.
• Conduct security risk assessments, oversee risk treatment plans and monitor control effectiveness.
• Coordinate security incident management and regulatory reporting with IT, Legal, Compliance and security teams.
• Support internal and external audits, regulatory inspections and remediation of findings.
• Drive third-party and supply chain security risk management including supplier assessments.
• Define, monitor and report security KPIs and risk metrics to local leadership and EMEA IS management.
• Deliver security awareness initiatives to promote cybersecurity and compliance culture.

Conoscenze

GRC

Cybersecurity

Regulatory compliance

Security frameworks

Risk assessment

Stakeholder management

Auditing readiness

Security certifications

English & Italian

Formazione

Degree in Information Security

Degree in Computer Science

Degree in Engineering

Degree in Law/Compliance

Descrizione del lavoro

Kuehne+Nagel is seeking an Information Security Manager to lead governance, risk and compliance initiatives and strengthen the cybersecurity posture across global systems and operations.

You will collaborate with IT, Legal, Compliance and the EMEA Information Security organization to ensure regulatory compliance, reduce cyber risks, and promote a resilient security culture throughout the organization.