ph3Key Responsibilities /h3ulliDefine and document cybersecurity compliance requirements for information-system controls in collaboration with system owners and system managers. /liliDevelop and maintain templates covering security processes, controls and technical security solutions across digital services. /liliSupport system owners and IT service providers with:ulliBusiness Impact Assessments (BIA). /liliDefinition of security scope. /liliRisk assessments. /liliSecurity plans. /liliSecure system architecture designs. /liliImplementation plans. /liliAssist with cybersecurity remediation activities, including:ulliTracking identified non-conformities. /liliAssigning corrective actions. /liliMonitoring remediation progress. /liliVerifying closure of corrective actions within agreed deadlines. /li /ul /li /ul /liliContribute to the development and maintenance of security baselines for information systems and digital services. /liliCoordinate and review risk assessments, ensuring that identified risks are evaluated against established compliance criteria and that mitigation measures are properly documented. /liliPrepare compliance-status reports highlighting security gaps, risks and remediation progress. /liliCollaborate with system owners, IT service providers and other stakeholders to ensure consistent interpretation and implementation of cybersecurity policies. /liliParticipate in technical and stakeholder meetings and communicate security requirements to both technical and non-technical audiences. /liliProduce clear, structured and high-quality security documentation, templates and guidance material. /liliKeep up to date with evolving technologies, particularly cloud services, AI-driven applications and other digital services, and their associated cybersecurity implications. /li /ulh3Required Qualifications /h3ulliMinimum EQF Level 5 education,



typically corresponding to at least two years of post-secondary education or higher. /liliEducational background in Cybersecurity, Information Security, Computer Science, IT, Risk Management, Governance, Audit or a related discipline. /liliPractical experience or demonstrable knowledge of information security and cybersecurity compliance. /liliGood knowledge of the ISO/IEC 27000 family of standards. /liliKnowledge of information-security governance, risk-management principles and security controls. /liliUnderstanding of Business Impact Assessments, Risk Assessments and Secure System Architecture. /liliAbility to review and assess security plans and related documentation. /liliStrong analytical and problem-solving capabilities. /liliAbility to produce clear, structured and professional technical documentation. /liliGood communication skills and the ability to explain cybersecurity concepts to technical and non-technical stakeholders. /liliAbility to work effectively in an international and multicultural environment. /liliGood level of written and spoken English. /li /ulh3Valuable /h3pProfessional certifications in cybersecurity, governance, risk, compliance, risk /ph3Management Or Auditing Are Considered An Advantage, Such As /h3ulliCGRC /liliCRISC /liliCISA /liliCISSP /liliCISM /liliOther relevant cybersecurity or GRC certifications /li /ulh3Technical Skills /h3ulliInformation security governance and compliance. /liliISO 27001 / ISO 27000 standards.



/liliCybersecurity policies and security controls. /liliRisk assessment and risk treatment. /liliBusiness Impact Assessment methodologies. /liliSecurity planning and documentation. /liliSecure system architecture principles. /liliSecurity baselines and control frameworks. /liliCompliance monitoring and remediation tracking. /liliCybersecurity requirements for cloud and modern digital services. /liliEmerging security considerations related to AI-driven applications. /li /ulh3Soft Skills /h3ulliStrong analytical and problem-solving mindset. /liliExcellent written and verbal communication. /liliAbility to produce high-quality documentation. /liliAbility to present technical information clearly to different audiences. /liliStrong attention to detail. /liliAbility to work independently and take initiative. /liliExcellent team-player attitude. /liliAbility to work across multiple projects and stakeholders. /liliComfortable working in multilingual and multicultural environments. /liliAbility to build trusted relationships with system owners, IT providers and institutional stakeholders. /liliHigh level of discretion, professionalism and integrity. /li /ulh3Ideal Candidate Profile /h3pThe ideal candidate is an early-career cybersecurity or information-security professional interested in developing a career in Governance, Risk Compliance (GRC). You should have a solid foundation in information security standards and risk management, be comfortable working with security documentation and assessments, and have the communication skills required to interact with both technical and business stakeholders. Experience with ISO 27001, risk assessments, security plans, security controls, compliance monitoring or cybersecurity audits would be particularly relevant. /p /p #J-18808-Ljbffr

📌 Cybersecurity Compliance Specialist (Agrate Brianza)
🏢 MEERAB GROUP
📍 Agrate Brianza