ph3Key Responsibilities /h3 ul liDefine and document cybersecurity compliance requirements for information-system controls in collaboration with system owners and system managers. /li liDevelop and maintain templates covering security processes, controls and technical security solutions across digital services. /li liSupport system owners and IT service providers with: ul liBusiness Impact Assessments (BIA). /li liDefinition of security scope. /li liRisk assessments. /li liSecurity plans. /li liSecure system architecture designs. /li liImplementation plans. /li /ul /li liAssist with cybersecurity remediation activities, including: ul liTracking identified non-conformities. /li liAssigning corrective actions. /li liMonitoring remediation progress. /li liVerifying closure of corrective actions within agreed deadlines. /li /ul /li liContribute to the development and maintenance of security baselines for information systems and digital services. /li liCoordinate and review risk assessments, ensuring that identified risks are evaluated against established compliance criteria and that mitigation measures are properly documented. /li liPrepare compliance-status reports highlighting security gaps, risks and remediation progress. /li liCollaborate with system owners, IT service providers and other stakeholders to ensure consistent interpretation and implementation of cybersecurity policies. /li liParticipate in technical and stakeholder meetings and communicate security requirements to both technical and non-technical audiences. /li liProduce clear, structured and high-quality security documentation, templates and guidance material. /li liKeep up to date with evolving technologies, particularly cloud services, AI-driven applications and other digital services, and their associated cybersecurity implications. /li /ul h3Required Qualifications /h3 ul liMinimum EQF Level 5 education,



typically corresponding to at least two years of post-secondary education or higher. /li liEducational background in Cybersecurity, Information Security, Computer Science, IT, Risk Management, Governance, Audit or a related discipline. /li liPractical experience or demonstrable knowledge of information security and cybersecurity compliance. /li liGood knowledge of the ISO/IEC 27000 family of standards. /li liKnowledge of information-security governance, risk-management principles and security controls. /li liUnderstanding of Business Impact Assessments, Risk Assessments and Secure System Architecture. /li liAbility to review and assess security plans and related documentation. /li liStrong analytical and problem-solving capabilities. /li liAbility to produce clear, structured and professional technical documentation. /li liGood communication skills and the ability to explain cybersecurity concepts to technical and non-technical stakeholders. /li liAbility to work effectively in an international and multicultural environment. /li liGood level of written and spoken English. /li /ul h3Valuable /h3 pProfessional certifications in cybersecurity, governance, risk, compliance, risk management or auditing are considered an advantage, such as: /p ul liCGRC /li liCRISC /li liCISA /li liCISSP /li liCISM /li liOther relevant cybersecurity or GRC certifications /li /ul h3Technical Skills /h3 pThe ideal candidate should demonstrate knowledge or exposure some of the next: /p ul liInformation security governance and compliance. /li liISO 27001 / ISO 27000 standards.



/li liCybersecurity policies and security controls. /li liRisk assessment and risk treatment. /li liBusiness Impact Assessment methodologies. /li liSecurity planning and documentation. /li liSecure system architecture principles. /li liSecurity baselines and control frameworks. /li liCompliance monitoring and remediation tracking. /li liCybersecurity requirements for cloud and modern digital services. /li liEmerging security considerations related to AI-driven applications. /li /ul h3Soft Skills /h3 ul liStrong analytical and problem-solving mindset. /li liExcellent written and verbal communication. /li liAbility to produce high-quality documentation. /li liAbility to present technical information clearly to different audiences. /li liStrong attention to detail. /li liAbility to work independently and take initiative. /li liExcellent team-player attitude. /li liAbility to work across multiple projects and stakeholders. /li liComfortable working in multilingual and multicultural environments. /li liAbility to build trusted relationships with system owners, IT providers and institutional stakeholders. /li liHigh level of discretion, professionalism and integrity. /li /ul h3Ideal Candidate Profile /h3 pThe ideal candidate is an early-career cybersecurity or information-security professional interested in developing a career in Governance, Risk Compliance (GRC). /p pYou should have a solid foundation in information security standards and risk management, be comfortable working with security documentation and assessments, and have the communication skills required to interact with both technical and business stakeholders. /p pExperience with ISO 27001, risk assessments, security plans, security controls, compliance monitoring or cybersecurity audits would be particularly relevant. /p /p #J-18808-Ljbffr

📌 Cybersecurity Compliance Specialist (Agrate Brianza)
🏢 Appsierra Group
📍 Agrate Brianza