Job OverviewJoin a team of experts dedicated to delivering innovative solutions and driving digital transformation for our clients.How you'll make a differenceSupport clients in achieving and maintaining compliance with cybersecurity regulations and standards such as NIS2, ISO/IEC 27001, TISAX, and GDPR.Conduct cybersecurity assessments, GAP analyses, and risk assessments to identify remediation actions and improvement opportunities.Design, implement, and maintain Information Security Management Systems (ISMS) aligned with international standards and best practices.Conduct security assessments, GAP analyses, Business Impact Analyses (BIA), and Risk Assessments to identify critical processes, operational impacts, continuity requirements, and remediation actions.Analyze business processes, operational dependencies, and critical systems to define business continuity parameters such as RTO, RPO, and MTPD.Manage consulting engagements related to audit readiness, certification support, and regulatory compliance programs.Act as a Virtual CISO (vCISO), providing strategic guidance on cybersecurity governance, risk management, and organizational security posture.Develop cybersecurity policies, procedures, standards, and governance documentation.Deliver training and awareness sessions on cybersecurity, compliance, and security best practices.Monitor regulatory and compliance developments, advising clients on emerging requirements and their operational impact.Work on high-impact cybersecurity and compliance projects.Collaborate with experienced consultants and international teams.Grow expertise across governance, risk, compliance, and cybersecurity domains.Collaborate with technical and business stakeholders to integrate cybersecurity into organizational processes and digital transformation initiatives.What we’re looking for3–5 years of experience in cybersecurity consulting, compliance, governance, or information security management.Strong knowledge of cybersecurity frameworks and regulations, including NIS2, ISO/IEC 27001, TISAX,



GDPR.Proven experience in security audits, risk assessments, GAP analyses, compliance programs.Experience designing and implementing security governance frameworks and compliance processes.Knowledge of Business Continuity and Disaster Recovery principles and related methodologies such as ISO 22301, ISO/TS 22317.Strong analytical, organizational, and documentation skills.Excellent communication and stakeholder management capabilities.Ability to work independently and manage projects with varying timelines and priorities.Client‑oriented mindset with a methodical and detail‑focused approach.Availability to travel for short, medium, or long‑term assignments when required.English proficiency at B2 level or higher.What we would consider a plusDegree in Computer Science, Engineering, Cybersecurity, Law, or a related field.Professional certifications such as ISO/IEC 27001 Lead Auditor, ISO/IEC 27001 Lead Implementer, CISA, CISM, CISSP.Previous experience as a Virtual CISO, Compliance Manager, or Information Security Manager.Familiarity with risk management and business continuity methodologies such as ISO 31000, ISO/IEC 27005, NIST Cybersecurity Framework, ISO 22301.Experience in regulated industries such as automotive, energy, manufacturing, healthcare, or financial services.Experience with GRC platforms and interactions with certification/accreditation bodies.Technical understanding of cloud security (AWS, Azure, GCP), SIEM and SOC environments, vulnerability management, network security architectures, identity and access management (IAM).BenefitsWe offer a comprehensive benefits package designed to support your professional growth, personal well-being, and work‑life balance.Welfare PackageWorklife KitEmpowering People initiativesOpen Space, Open Mind office environmentCareer Path development programLearning & Development opportunitiesThe gross annual salary for this position ranges from €35,000 to €50,000 and may be adjusted based on the candidate’s skills and experience beyond the required level. The role is covered by the CCNL Metalmeccanico Industria (CNEL code C011).#J-18808-Ljbffr

📌 Cyber Security Compliance Consultant (Venezia)
🏢 Arsenalia
📍 Venezia