Senior Information Security Specialist

Beko Europe; Milano; In loco; EUR 43.000 - 55.000; Tempo pieno

Descrizione del lavoro

Beko Europe is seeking an Information Security Senior Analyst to strengthen governance, risk and compliance across IT and OT environments in Europe. You will support regulatory alignment with NIS2, GDPR and related directives, and help implement security policies, risk assessments and audit activities.

The role involves collaborating with international teams, promoting secure development practices and driving security awareness across European entities in a fast-evolving landscape.

Competenze

• Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field
• 3–6 years of experience in Information Security, GRC, or similar roles
• Good knowledge of cybersecurity frameworks (ISO 27001, NIST)
• Understanding of European regulatory landscape (NIS2, GDPR)
• Good knowledge of risk management principles and security controls
• Good knowledge of application security and vulnerability management practices
• Familiarity with incident management processes
• Fluent in English; Italian is a plus

Mansioni

• Supporting the implementation and maintenance of the Information Security Governance framework across Beko Europe
• Ensuring security requirements are incorporated into projects, processes, and operational activities
• Contributing to compliance initiatives with European cybersecurity regulations (NIS2, CRA, GDPR, EU AI Act)
• Assisting in the definition, update, and rollout of security policies, standards, and procedures
• Supporting cybersecurity risk assessments (IT and OT) and remediation tracking
• Supporting vulnerability management and remediation follow-up
• Contributing to application security awareness and secure development
• Supporting incident management activities and post-incident review actions
• Participating in internal and external audits (NIS2 readiness, ISO27001, audits)
• Supporting third-party risk management activities and supplier monitoring
• Contributing to cybersecurity awareness across European entities

Conoscenze

Cybersecurity

GRC

Risk management

Security controls

Incident management

Formazione

Bachelor's or Master’s degree in Computer Science or Information Security

Strumenti

ISO 27001

NIST

Descrizione del lavoro

The Information Systems team is responsible for implementation of the enterprise architecture and the development and maintenance of the organization's computing/IT environment. Determines and develops architectural approaches and solutions, conducts business reviews, documents current systems and develops recommendations of how to proceed with the applications.

As an Information Security Senior Analyst, you will support the execution of Beko Europe’s cybersecurity governance, risk, and compliance program, ensuring the security technical compliance with the European regulatory scenario (including NIS2). You will contribute to the implementation of security policies and technical controls across IT and OT environments, supporting risk management, audit activities, and continuous improvement of the organization’s security posture.

Responsibilities

• Supporting the implementation and maintenance of the Information Security Governance framework across Beko Europe
• Ensuring security requirements are incorporated into projects, processes, and operational activities, including the security architectural review requirements
• Contributing to compliance initiatives with European cybersecurity regulations (e.g., NIS2, CRA, GDPR, EU AI Act where applicable)
• Assisting in the definition, update, and rollout of security policies, standards, and procedures
• Supporting cybersecurity risk assessments (including IT and OT scope) and tracking remediation plans
• Supporting vulnerability management processes, including coordination with Global Security teams and remediation follow‑up
• Contributing to application security awareness, promoting secure development principles and supporting risk identification
• Supporting incident management activities, including coordination, documentation, and post‑incident review actions
• Participating in internal and external audits (e.g., NIS2 readiness, ISO27001, financial audits), ensuring evidence collection and follow‑up
• Supporting third‑party risk management activities, including security assessments and monitoring of suppliers
• Contributing to cybersecurity awareness initiatives across European entities

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field
• 3 – 6 years of experience in Information Security, GRC, or similar roles
• Good knowledge of cybersecurity frameworks (e.g., ISO 27001, NIST)
• Understanding of European regulatory landscape (NIS2, GDPR, cyber‑related directives)
• Good knowledge of risk management principles and security controls
• Good knowledge of application security and vulnerability management practices
• Familiarity with incident management processes
• Strong analytical mindset and attention to detail
• Fluency in English, Italian is a plus

Preferred Skills and Experience

• Experience in multinational or multi‑entity environments
• Exposure to IT/OT security or industrial environments
• Experience supporting audits or regulatory compliance programs
• Relevant certifications (ISO 27001 lead auditor, CISM, CISA, CISSP, CEH, CHFI are a plus)
• Strong communication and stakeholder collaboration skills
• Problem‑solving oriented, with a proactive and analytical approach
• Ability to work independently, demonstrating ownership and accountability for assigned activities
• Collaborative team player, able to effectively work with cross‑functional teams and stakeholders
• Ability to deeply understand business needs and translate them into security requirements aligned with company strategy
• Curious and proactive in exploring and understanding emerging risk scenarios, particularly those related to innovative technologies such as Artificial Intelligence

What We Offer

• The salary range for this position is € 43,000 – € 55,000 gross per year. The final offer will reflect the outcome of the recruitment process and the overall assessment of the candidate, based on objective and gender‑neutral criteria, including skills, experience, qualifications and demonstrated expertise.
• A structured and evolving cybersecurity program in a European environment
• Exposure to governance, compliance, and operational security domains
• Collaboration with international and cross‑functional teams
• Continuous learning in a fast‑evolving regulatory and threat landscape

We are an equal opportunity employer. All applicants will be considered for employment without attention to race, sex, colour, national or social origin, ethnicity, religion, age, pregnancy, disability, sexual orientation, gender identity and expression, marital status or political opinion.