15 ago
|
ALFASIGMA
|
Italia
As Cybersecurity Governance Senior Manager, you willmaintainand evolve Alfasigma's Cyber Governance, Risk & Compliance (GRC) framework across the Group, supporting the CISO in steering cyber risk management, regulatory compliance (NIS2, GDPR, Gx P) and security maturity. A senior, high-visibility role spanning cyber risk assessment, ISO/IEC 27001 and NIST CSF, third-party risk, OT risk governance, AI Act and security awareness in a global, regulated pharmaceutical environment. Your role: Maintain and evolve the Group's Cyber Governance, Risk & Compliance framework (ISO/IEC 27001, NIST CSF, NIS2). Support the CISO in reporting cyber risk to committees and top management, translating technical risk into business priorities. Steer NIS2, GDPR and Gx P-related compliance across all Group companies and coordinate remediation plans. Lead enterprise cyber risk assessments and third-party / supply-chain risk assessments. Oversee OT risk governance, AI governance (AI Act) and Business Continuity / Operational Resilience. Design KPI/KRI reporting and dashboards for management and the Board,
and run Security Awareness and security-culture programmes. Who are you: 8+ years in Cybersecurity Governance, Risk Management or GRC, including experience supporting senior management. In-depth knowledge of NIS2, ISO/IEC 27001 and NIST CSF and of cyber risk assessment methodologies. ISO/IEC 27001 Lead Auditor certification; GRC certifications (CISM, CISA, CRISC) are a plus. Experience in complex regulated environments (Pharma / Life Sciences or Financial Services). Excellent ability to communicate cyber risk clearly and concisely. Excellent command of English. What's in it for you: A high-visibility role reporting directly to the CISO, shaping cyber governance for a growing global pharmaceutical group. Rome-based with hybrid working and a permanent, full-time contract. Real impact on the resilience and compliance posture of the entire Group. Salary Pay Range: 75.000€ - 95.000€ The compensa
📌 Senior manager, cybersecurity governance risk and compliance(grc) (Italia)
🏢 ALFASIGMA
📍 Italia