Senior GRC Cybersecurity Risk Advisor – Milan (Hybrid)

Source Technology Limited; Milano; Ibrido; EUR 70.000 - 110.000; Tempo pieno

Descrizione del lavoro

Source Group International Ltd is seeking an experienced Cybersecurity Governance, Risk & Compliance Consultant to support governance, risk management, compliance, and audit activities across its Italian operations in Milan.

The role requires conducting risk assessments, evaluating controls, supporting policy development, and assisting with audits and regulatory compliance (NIS2, ISO 27001, GDPR, NIST). Fluent in Italian and English is essential.

Competenze

• Strong background in Cybersecurity Governance, Risk & Compliance.
• Experience performing security risk assessments and control reviews.
• Knowledge of NIST, ISO 27001, NIS2, GDPR, or similar frameworks.
• Experience supporting audits, compliance reviews, and remediation activities.

Mansioni

• Conduct cybersecurity risk assessments and maintain risk registers
• Assess security controls, vulnerabilities, and remediation plan
• Support cybersecurity governance, policy development, and risk reporting
• Assist with internal and external audits and regulatory compliance activities (NIS2, ISO 27001, GDPR, NIST)
• Develop management reporting, dashboards, and risk metrics
• Partner with IT, Security, Legal, Privacy, Procurement, and business stakeholders to drive cybersecurity best practices

Conoscenze

GRC

Cybersecurity governance

Risk assessment

Regulatory compliance

Audits

NIST ISO27001 GDPR

Descrizione del lavoro

Source Group International Ltd is seeking an experienced Cybersecurity Governance, Risk & Compliance Consultant to support governance, risk management, compliance, and audit activities across its Italian operations in Milan.

The role requires conducting risk assessments, evaluating controls, supporting policy development, and assisting with audits and regulatory compliance (NIS2, ISO 27001, GDPR, NIST). Fluent in Italian and English is essential.