Senior GRC Security Risk & Compliance Analyst

SGI; Milano; Ibrido; EUR 60.000 - 90.000; Tempo pieno

Descrizione del lavoro

SGI is seeking an experienced Cybersecurity Governance, Risk & Compliance Consultant to join our Milan IT security team. The role focuses on supporting governance, risk management, compliance, and audit activities across Italian operations.

You will conduct risk assessments, review controls, develop governance policies, and coordinate remediation with IT, Legal, and business units, in a hybrid Milan-based environment.

Competenze

• Strong background in Cybersecurity Governance, Risk & Compliance.
• Experience performing security risk assessments and control reviews.
• Knowledge of NIST, ISO 27001, NIS2, GDPR, or similar frameworks.
• Experience supporting audits, compliance reviews, and remediation activities.
• Fluent in Italian and English.
• Relevant certifications such as CISSP, CISM, or CRISC are advantageous.

Mansioni

• Conduct cybersecurity risk assessments and maintain risk registers.
• Assess security controls, vulnerabilities, and remediation plan.
• Support cybersecurity governance, policy development, and risk reporting.
• Assist with internal and external audits and regulatory compliance activities (NIS2, ISO 27001, GDPR, NIST).
• Develop management reporting, dashboards, and risk metrics.
• Partner with IT, Security, Legal, Privacy, Procurement, and business stakeholders to drive cybersecurity best practices.

Conoscenze

Cybersecurity Governance

Risk Management

Compliance

Audit support

Policy development

Reporting

Descrizione del lavoro

SGI is seeking an experienced Cybersecurity Governance, Risk & Compliance Consultant to join our Milan IT security team. The role focuses on supporting governance, risk management, compliance, and audit activities across Italian operations.

You will conduct risk assessments, review controls, develop governance policies, and coordinate remediation with IT, Legal, and business units, in a hybrid Milan-based environment.