What We ’re Looking For

Ha le carte in regola per avere successo? Le seguenti informazioni devono essere lette attentamente da tutti i candidati.

Join a team of experts dedicated to delivering innovative solutions and driving digital transformation for our clients.

How you’ll make a difference

-

- Support clients in achieving and maintaining compliance with cybersecurity regulations and standards such as NIS2, ISO/IEC 27001, TISAX, and GDPR.

- Conduct cybersecurity assessments, GAP analyses, and risk assessments to identify remediation actions and improvement opportunities.

- Design, implement, and maintain Information Security Management Systems (ISMS) aligned with international standards and best practices.

- Conduct security assessments, GAP Analyses, Business Impact Analyses (BIA), and Risk Assessments to identify critical processes, operational impacts, continuity requirements, and remediation actions.

- Analyze business processes, operational dependencies, and critical systems in order to define business continuity parameters such as RTO, RPO, and MTPD.

- Manage consulting engagements related to audit readiness, certification support, and regulatory compliance programs.

- Act as a Virtual CISO (vCISO), providing strategic guidance on cybersecurity governance, risk management, and organizational security posture.

- Develop cybersecurity policies, procedures, standards, and governance documentation.

- Deliver training and awareness sessions on cybersecurity, compliance, and security best practices.

- Monitor regulatory and compliance developments, advising clients on emerging requirements and their operational impact.





- Work on high-impact cybersecurity and compliance projects.

- Collaborate with experienced consultants and international teams.

- Grow your expertise across governance, risk, compliance, and cybersecurity domains.

- Collaborate with technical and business stakeholders to integrate cybersecurity into organizational processes and digital transformation initiatives.

What we’re looking for

-

- 3–5 years of experience in cybersecurity consulting, compliance, governance, or information security management.

- Strong knowledge of cybersecurity frameworks and regulations, including: NIS2, ISO/IEC 27001, TISAX, GDPR.

- Proven experience in: Security audits, Risk assessments, GAP analyses, Compliance programs.

- Experience in designing and implementing security governance frameworks and compliance processes.

- Knowledge of Business Continuity and Disaster Recovery principles and related methodologies (e.g. ISO 22301, ISO/TS 22317).

- Strong analytical, organizational, and documentation skills.

- Excellent communication and stakeholder management capabilities.

- Ability to work independently and manage projects with varying timelines and priorities.

- Client-oriented mindset with a methodical and detail-focused approach.

- Availability to travel for short-, medium-,



or long-term assignments when required.

- English proficiency at B2 level or higher.

- The gross annual salary for this position ranges from €35,000 to €50,000. It may be adjusted based on the candidate’s skills and experience beyond the required level.

- The role is covered by the CCNL Metalmeccanico Industria (CNEL code C011).

What we would consider a plus

-

- Degree in Computer Science, Engineering, Cybersecurity, Law, or a related field.

- Professional certifications such as: ISO/IEC 27001 Lead Auditor, ISO/IEC 27001 Lead Implementer, CISA, CISM, CISSP.

- Previous experience as a Virtual CISO, Compliance Manager, or Information Security Manager.

- Familiarity with risk management and business continuity methodologies such as: ISO 31000, ISO/IEC 27005, NIST Cybersecurity Framework, ISO 22301

- Experience in regulated industries such as automotive, energy, manufacturing, healthcare, or financial services.

- Experience with GRC platforms and interactions with certification/accreditation bodies.

- Technical understanding of: Cloud security (AWS, Azure, GCP), SIEM and SOC environments, Vulnerability management, Network security architectures, Identity and Access Management (IAM).

What we offer

-

- Welfare Package

A comprehensive corporate welfare platform, offering a wide range of benefits and healthcare support.

- Worklife Kit

A complete welcome package with all essentials for day-to-day productivity, complemented by comprehensive benefits. We offer digital meal vouchers and flexible reimbursement options to support both your work and personal needs.

📌 Cyber Security Compliance Consultant (Venezia)
🏢 Arsenalia Group
📍 Venezia