Job Description

This opportunity is ideal for an experienced Information Security professional with knowledge of cybersecurity governance, risk management, compliance, and incident response.

What You’ll Do:

- Conduct cybersecurity risk assessments for COET srl.
- Analyze threats, vulnerabilities, control effectiveness, and residual risks.
- Maintain and update cybersecurity risk registers.
- Track risk mitigation and remediation activities through completion.
- Recommend ways to improve the efficiency, consistency, and effectiveness of Information Security operations.
- Develop and monitor cybersecurity policies, standards, and control requirements.
- Review risk assessments, mitigation plans, exceptions, and risk acceptance requests.
- Support cybersecurity governance forums and reporting activities.
- Assist with internal and external cybersecurity audits.




- Coordinate evidence collection and remediation tracking.
- Assess compliance with Hitachi Energy cybersecurity standards and applicable country regulations, including NIS2.
- Support control assessments and gap analyses.
- Develop risk metrics, dashboards, and management reports.
- Prepare materials for management and governance reviews.
- Escalate significant cybersecurity risks and emerging trends.
- Collaborate with IT, Product Security, IAM, Legal, Procurement, Privacy, and business teams.
- Provide guidance on cybersecurity risk management processes and requirements.
- Promote cybersecurity awareness and risk-informed decision-making.

📌 Cybersecurity Governance, Risk & Compliance (GRC) Consultant (San Donato Milanese)
🏢 Lifted, an Upwork Company™
📍 San Donato Milanese