Cybersecurity Governance, Risk & Compliance Consultant

Location: Milan, Italy
Work Model: Hybrid (3 days on-site per month in Milan)
Workload: 100%

Key Responsibilities
- Conduct cybersecurity risk assessments and maintain risk registers
- Assess security controls, vulnerabilities, and remediation plan
- Support cybersecurity governance, policy development, and risk reporting
- Assist with internal and external audits and regulatory compliance activities (NIS2, ISO 27001, GDPR, NIST)
- Develop management reporting, dashboards, and risk metrics
- Partner with IT, Security, Legal, Privacy, Procurement, and business stakeholders to drive cybersecurity best practices

Required Experience
- Strong background in Cybersecurity Governance, Risk & Compliance
- Experience performing security risk assessments and control reviews
- Knowledge of NIST, ISO 27001, NIS2, GDPR, or similar frameworks
- Experience supporting audits, compliance reviews, and remediation activities
- Fluent in Italian and English
- Relevant certifications such as CISSP, CISM, or CRISC are advantageous

Source Group International Ltd is acting as an Employment Business in relation to this vacancy

📌 Security Threat Assessment (Bardi)
🏢 Sgi
📍 Bardi