h3Cybersecurity Governance, Risk Compliance (GRC) Consultant /h3 ul liContract /li /ul pAn enterprise technology client is seeking an experienced bInformation Security Professional /b to support the protection of COET srl’s information systems and data from cybersecurity threats. /p pThe selected consultant will work closely with the company's Cybersecurity team to identify, assess, monitor, and report cybersecurity risks across the COET organization. /p pThis is a temporary, tempo parziale consulting opportunity based in Italy /p pThis opportunity is ideal for an experienced Information Security professional with knowledge of bcybersecurity governance, risk management, compliance, and incident response /b. /p pWhat You’ll Do: /p ul liConduct cybersecurity risk assessments for COET srl. /li liAnalyze threats, vulnerabilities, control effectiveness, and residual risks. /li liMaintain and update cybersecurity risk registers. /li liTrack risk mitigation and remediation activities through completion. /li liRecommend ways to improve the efficiency, consistency, and effectiveness of Information Security operations. /li liDevelop and monitor cybersecurity policies, standards, and control requirements. /li liReview risk assessments, mitigation plans, exceptions, and risk acceptance requests. /li liSupport cybersecurity governance forums and reporting activities. /li liAssist with internal and external cybersecurity audits. /li liCoordinate evidence collection and remediation tracking. /liliAssess compliance with company's Energy cybersecurity standards and applicable country regulations, including NIS2. /li liSupport control assessments and gap analyses. /li liPrepare materials for management and governance reviews.



/li liEscalate significant cybersecurity risks and emerging trends. /li liCollaborate with IT, Product Security, IAM, Legal, Procurement, Privacy, and business teams. /li liProvide guidance on cybersecurity risk management processes and requirements. /li liPromote cybersecurity awareness and risk-informed decision-making. /li /ul ul liExperience in Information Security governance, risk management, compliance, and incident response. /li liKnowledge of common cybersecurity frameworks and regulations, such as NIST, NIS2, ISO 27001, and GDPR. /li liCISSP, CISM, or an equivalent certification is desirable. /li liFluency in both Italian and English. /li liStrong communication and stakeholder management skills. /li liAbility to work independently and collaborate with cybersecurity and business teams. /li liCybersecurity risk assessments and updated risk registers. /li liRisk mitigation and remediation tracking. /li liCybersecurity policies, standards, and control requirements. /li liAudit evidence, control assessments, and gap analysis support. /li liGovernance review materials and cybersecurity reporting. /li /ul pLocation Requirement /p ul liOn-site presence at COET premises in bSan Donato Milanese, Italy /b, at least b3 times per month /b. /li ul libCategory: /b Information Security Compliance /li libDuration: /b September 14, 2026 to September 14, 2027 /li liThe client is still evaluating the appropriate engagement structure. The selected talent may ultimately be engaged through an Employer of Record (EOR) arrangement rather than as an Independent Contractor. /li liCandidates should be comfortable proceeding under either engagement structure. If EOR is selected, additional onboarding requirements and timelines may apply before the engagement begins. /li /ul /ul

📌 Cybersecurity Governance, Risk & Compliance (GRC) Consultant (San Donato Milanese)
🏢 Lifted, an Upwork Company™
📍 San Donato Milanese