Security Threat Assessment & Analysis Senior Professional

Sgi; Bardi; Ibrido; EUR 65.000 - 105.000; Tempo pieno

Vantaggi offerti da questo lavoro

Hybrid work model

Descrizione del lavoro

Source Group International Ltd. in Milan, Italy, seeks a Cybersecurity Governance, Risk & Compliance Consultant to join our hybrid team. You will drive risk assessments, policy governance, and risk reporting across NIS2, ISO 27001, GDPR, and NIST, collaborating with IT, Legal and business stakeholders.

The role requires fluency in Italian and English, with certifications such as CISSP/CISM/CRISC considered advantageous. This position blends on-site and remote work within a 100% workload.

Competenze

• Experience in cybersecurity governance, risk and compliance.
• Experience performing security risk assessments and control reviews.
• Knowledge of NIST, ISO 27001, NIS2, GDPR, or similar frameworks.
• Experience supporting audits, compliance reviews, and remediation activities.
• Fluent in Italian and English.

Mansioni

• Conduct cybersecurity risk assessments and maintain risk registers.
• Assess security controls, vulnerabilities, and remediation plan.
• Support cybersecurity governance, policy development, and risk reporting.
• Assist with audits and regulatory compliance activities (NIS2, ISO 27001, GDPR, NIST).
• Develop management reporting, dashboards, and risk metrics.
• Partner with IT, Security, Legal, Privacy, Procurement, and business stakeholders to drive cybersecurity best practices.

Conoscenze

Cybersecurity Governance

Risk assessments & control reviews

Regulatory frameworks (NIST/ISO 27001/

Audits & remediation activities

Italian & English fluency

CISSP/CISM/CRISC advantageous

Descrizione del lavoro

Cybersecurity Governance, Risk & Compliance Consultant

Location: Milan, Italy
Work Model: Hybrid (3 days on-site per month in Milan)
Workload: 100%

Key Responsibilities

• Conduct cybersecurity risk assessments and maintain risk registers
• Assess security controls, vulnerabilities, and remediation plan
• Support cybersecurity governance, policy development, and risk reporting
• Assist with internal and external audits and regulatory compliance activities (NIS2, ISO 27001, GDPR, NIST)
• Develop management reporting, dashboards, and risk metrics
• Partner with IT, Security, Legal, Privacy, Procurement, and business stakeholders to drive cybersecurity best practices

Required Experience

• Strong background in Cybersecurity Governance, Risk & Compliance
• Experience performing security risk assessments and control reviews
• Knowledge of NIST, ISO 27001, NIS2, GDPR, or similar frameworks
• Experience supporting audits, compliance reviews, and remediation activities
• Fluent in Italian and English
• Relevant certifications such as CISSP, CISM, or CRISC are advantageous

Source Group International Ltd is acting as an Employment Business in relation to this vacancy