ph3Cybersecurity Governance, Risk Compliance Consultant /h3pLocation: Milan, Italy /ppWork Model: Hybrid (3 days on-site per month in Milan) /ppWorkload: 100% /ppWe are seeking an experienced GRC Professional to support cybersecurity governance, risk management, compliance, and audit activities across its Italian operations.
/ph3Key Responsibilities /h3ulliConduct cybersecurity risk assessments and maintain risk registers /liliAssess security controls, vulnerabilities, and remediation plan /liliSupport cybersecurity governance, policy development, and risk reporting /liliAssist with internal and external audits and regulatory compliance activities (NIS2, ISO *****, GDPR, NIST) /liliDevelop management reporting, dashboards, and risk metrics /liliPartner with IT, Security, Legal, Privacy, Procurement,



and business stakeholders to drive cybersecurity best practices /li /ulh3Required Experience /h3ulliStrong background in Cybersecurity Governance, Risk Compliance /liliExperience performing security risk assessments and control reviews /liliKnowledge of NIST, ISO *****, NIS2, GDPR, or similar frameworks /liliExperience supporting audits, compliance reviews, and remediation activities /liliFluent in Italian and English /liliRelevant certifications such as CISSP, CISM, or CRISC are advantageous /li /ulpWe believe in equal opportunity for all and actively encourage applications from diverse backgrounds, experiences, and perspectives.
/ppSource Group International Ltd is acting as an Employment Business in relation to this vacancy /p /p #J-*****-Ljbffr

📌 Security Threat Assessment & Analysis Senior Professional (Milano)
🏢 Source Technology
📍 Milano