Cybersecurity Governance, Risk & Compliance Consultant

Possiede le competenze e l'esperienza giuste per questo ruolo? Continui a leggere per scoprirlo e invii la sua candidatura.

Location: Milan, Italy

Work Model: Hybrid (3 days on-site per month in Milan)

Workload: 100%

We are seeking an experienced GRC Professional to support cybersecurity governance, risk management, compliance, and audit activities across its Italian operations.

Key Responsibilities

Conduct cybersecurity risk assessments and maintain risk registers

Assess security controls, vulnerabilities, and remediation plan

Support cybersecurity governance, policy development, and risk reporting

Assist with internal and external audits and regulatory compliance activities (NIS2, ISO 27001, GDPR, NIST)

Develop management reporting, dashboards, and risk metrics

Partner with IT, Security, Legal, Privacy, Procurement, and business stakeholders to drive cybersecurity best practices

Required Experience

Strong background in Cybersecurity Governance,



Risk & Compliance

Experience performing security risk assessments and control reviews

Knowledge of NIST, ISO 27001, NIS2, GDPR, or similar frameworks

Experience supporting audits, compliance reviews, and remediation activities

Fluent in Italian and English

Relevant certifications such as CISSP, CISM, or CRISC are advantageous

Should you be interested, please send your application outlining your relevant experience and availability. xkiyazw

By applying for this role, you consent to SGI contacting you by telephone regarding recruitment services, market updates, and relevant business opportunities

We believe in equal opportunity for all and actively encourage applications from diverse backgrounds, experiences, and perspectives.

Source Group International Ltd is acting as an Employment Business in relation to this vacancy

📌 Security Threat Assessment & Analysis Senior Professional (Roma)
🏢 Sgi
📍 Roma