Job Overview

Join a team of experts dedicated to delivering innovative solutions and driving digital transformation for our clients.

How you'll make a difference

- Support clients in achieving and maintaining compliance with cybersecurity regulations and standards such as NIS2, ISO/IEC 27001, TISAX, and GDPR.
- Conduct cybersecurity assessments, GAP analyses, and risk assessments to identify remediation actions and improvement opportunities.
- Design, implement, and maintain Information Security Management Systems (ISMS) aligned with international standards and best practices.
- Conduct security assessments, GAP analyses, Business Impact Analyses (BIA), and Risk Assessments to identify critical processes, operational impacts, continuity requirements, and remediation actions.
- Analyze business processes, operational dependencies, and critical systems to define business continuity parameters such as RTO, RPO, and MTPD.
- Manage consulting engagements related to audit readiness, certification support, and regulatory compliance programs.
- Act as a Virtual CISO (vCISO), providing strategic guidance on cybersecurity governance, risk management, and organizational security posture.
- Develop cybersecurity policies, procedures, standards, and governance documentation.
- Deliver training and awareness sessions on cybersecurity, compliance, and security best practices.
- Monitor regulatory and compliance developments, advising clients on emerging requirements and their operational impact.
- Work on high-impact cybersecurity and compliance projects.




- Collaborate with experienced consultants and international teams.
- Grow expertise across governance, risk, compliance, and cybersecurity domains.
- Collaborate with technical and business stakeholders to integrate cybersecurity into organizational processes and digital transformation initiatives.

What we’re looking for

- 3–5 years of experience in cybersecurity consulting, compliance, governance, or information security management.
- Strong knowledge of cybersecurity frameworks and regulations, including NIS2, ISO/IEC 27001, TISAX, GDPR.
- Proven experience in security audits, risk assessments, GAP analyses, compliance programs.
- Experience designing and implementing security governance frameworks and compliance processes.
- Knowledge of Business Continuity and Disaster Recovery principles and related methodologies such as ISO 22301, ISO/TS 22317.
- Strong analytical, organizational, and documentation skills.
- Excellent communication and stakeholder management capabilities.
- Ability to work independently and manage projects with varying timelines and priorities.
- Client‑oriented mindset with a methodical and detail‑focused approach.
- Availability to travel for short, medium, or long‑term assignments when required.




- English proficiency at B2 level or higher.

What we would consider a plus

- Degree in Computer Science, Engineering, Cybersecurity, Law, or a related field.
- Professional certifications such as ISO/IEC 27001 Lead Auditor, ISO/IEC 27001 Lead Implementer, CISA, CISM, CISSP.
- Previous experience as a Virtual CISO, Compliance Manager, or Information Security Manager.
- Familiarity with risk management and business continuity methodologies such as ISO 31000, ISO/IEC 27005, NIST Cybersecurity Framework, ISO 22301.
- Experience in regulated industries such as automotive, energy, manufacturing, healthcare, or financial services.
- Experience with GRC platforms and interactions with certification/accreditation bodies.
- Technical understanding of cloud security (AWS, Azure, GCP), SIEM and SOC environments, vulnerability management, network security architectures, identity and access management (IAM).

Benefits

We offer a comprehensive benefits package designed to support your professional growth, personal well-being, and work‑life balance.

- Welfare Package
- Worklife Kit
- Empowering People initiatives
- Open Space, Open Mind office environment
- Career Path development program
- Learning & Development opportunities

The gross annual salary for this position ranges from €35,000 to €50,000 and may be adjusted based on the candidate’s skills and experience beyond the required level. The role is covered by the CCNL Metalmeccanico Industria (CNEL code C011).

#J-18808-Ljbffr

📌 Cyber Security Compliance Consultant (Venezia)
🏢 Arsenalia
📍 Venezia