Cybersecurity Governance, Risk & Compliance Consultant
Location: Milan, Italy Work Model: Hybrid (3 days on-site per month in Milan) Workload: 100%
We are seeking an experienced GRC Professional to support cybersecurity governance, risk management, compliance, and audit activities across its Italian operations.
Key Responsibilities
Conduct cybersecurity risk assessments and maintain risk registers
Assess security controls, vulnerabilities, and remediation plan
Support cybersecurity governance, policy development, and risk reporting
Assist with internal and external audits and regulatory compliance activities (NIS2, ISO *****, GDPR, NIST)
Develop management reporting, dashboards, and risk metrics
Partner with IT, Security, Legal, Privacy, Procurement,



and business stakeholders to drive cybersecurity best practices
Required Experience
Strong background in Cybersecurity Governance, Risk & Compliance
Experience performing security risk assessments and control reviews
Knowledge of NIST, ISO *****, NIS2, GDPR, or similar frameworks
Experience supporting audits, compliance reviews, and remediation activities
Fluent in Italian and EnglishRelevant certifications such as CISSP, CISM, or CRISC are advantageous
We believe in equal opportunity for all and actively encourage applications from diverse backgrounds, experiences, and perspectives.
#J-*****-Ljbffr

📌 Security Threat Assessment & Analysis Senior Professional (Milano)
🏢 Sgi
📍 Milano