ppThe Information Systems team is responsible for implementation of the enterprise architecture and the development and maintenance of the organization's computing/IT environment. Determines and develops architectural approaches and solutions, conducts business reviews, documents current systems and develops recommendations of how to proceed with the applications. /p pAs an Information Security Senior Analyst, you will support the execution of Beko Europe’s cybersecurity governance, risk, and compliance program, ensuring the security technical compliance with the European regulatory scenario (including NIS2). You will contribute to the implementation of security policies and technical controls across IT and OT environments, supporting risk management, audit activities, and continuous improvement of the organization’s security posture. /p h3Responsibilities /h3 ul liSupporting the implementation and maintenance of the Information Security Governance framework across Beko Europe /li liEnsuring security requirements are incorporated into projects, processes, and operational activities, including the security architectural review requirements /li liContributing to compliance initiatives with European cybersecurity regulations (e.g., NIS2, CRA, GDPR, EU AI Act where applicable) /li liAssisting in the definition, update, and rollout of security policies, standards, and procedures /li liSupporting cybersecurity risk assessments (including IT and OT scope) and tracking remediation plans /li liSupporting vulnerability management processes, including coordination with Global Security teams and remediation follow‑up /li liContributing to application security awareness,



promoting secure development principles and supporting risk identification /li liSupporting incident management activities, including coordination, documentation, and post‑incident review actions /li liParticipating in internal and external audits (e.g., NIS2 readiness, ISO27001, financial audits), ensuring evidence collection and follow‑up /li liSupporting third‑party risk management activities, including security assessments and monitoring of suppliers /li liContributing to cybersecurity awareness initiatives across European entities /li /ul h3Qualifications /h3 ul liBachelor’s or Master’s degree in Computer Science, Information Security, or a related field /li li3 – 6 years of experience in Information Security, GRC, or similar roles /li liGood knowledge of cybersecurity frameworks (e.g., ISO 27001, NIST) /li liUnderstanding of European regulatory landscape (NIS2, GDPR, cyber‑related directives) /li liGood knowledge of risk management principles and security controls /li liGood knowledge of application security and vulnerability management practices /li liFamiliarity with incident management processes /li liStrong analytical mindset and attention to detail /li liFluency in English,



Italian is a plus /li /ul h3Preferred Skills and Experience /h3 ul liExperience in multinational or multi‑entity environments /li liExposure to IT/OT security or industrial environments /li liExperience supporting audits or regulatory compliance programs /li liRelevant certifications (ISO 27001 lead auditor, CISM, CISA, CISSP, CEH, CHFI are a plus) /li liStrong communication and stakeholder collaboration skills /li liProblem‑solving oriented, with a proactive and analytical approach /li liAbility to work independently, demonstrating ownership and accountability for assigned activities /li liCollaborative team player, able to effectively work with cross‑functional teams and stakeholders /li liAbility to deeply understand business needs and translate them into security requirements aligned with company strategy /li liCurious and proactive in exploring and understanding emerging risk scenarios, particularly those related to innovative technologies such as Artificial Intelligence /li /ul h3What We Offer /h3 ul liThe salary range for this position is € 43,000 – € 55,000 gross per year. The final offer will reflect the outcome of the recruitment process and the overall assessment of the candidate, based on objective and gender‑neutral criteria, including skills, experience, qualifications and demonstrated expertise. /li liA structured and evolving cybersecurity program in a European environment /li liExposure to governance, compliance, and operational security domains /li liCollaboration with international and cross‑functional teams /li liContinuous learning in a fast‑evolving regulatory and threat landscape /li /ul pWe are an equal opportunity employer. All applicants will be considered for employment without attention to race, sex, colour, national or social origin, ethnicity, religion, age, pregnancy, disability, sexual orientation, gender identity and expression, marital status or political opinion. /p /p #J-18808-Ljbffr

📌 Senior Information Security Specialist (Milano)
🏢 BEKO EUROPE
📍 Milano