pAn enterprise technology client is seeking an experienced bInformation Security Professional /b to support the protection of COET srl's information systems and data from cybersecurity threats.
/ppThe selected consultant will work closely with the company's Cybersecurity team to identify, assess, monitor, and report cybersecurity risks across the COET organization.
/ppThis is a temporary, part-time consulting opportunity based in Italy.
/ph3Job Description /h3pThis opportunity is ideal for an experienced Information Security professional with knowledge of bcybersecurity governance, risk management, compliance, and incident response /b.
/ppWhat You'll Do: /pulliConduct cybersecurity risk assessments for COET srl.
/liliAnalyze threats, vulnerabilities, control effectiveness, and residual risks.
/liliMaintain and update cybersecurity risk registers.
/liliTrack risk mitigation and remediation activities through completion.
/liliRecommend ways to improve the efficiency, consistency, and effectiveness of Information Security operations.
/liliDevelop and monitor cybersecurity policies, standards, and control requirements.
/liliReview risk assessments, mitigation plans, exceptions, and risk acceptance requests.
/liliSupport cybersecurity governance forums and reporting activities.
/liliAssist with internal and external cybersecurity audits.
/liliCoordinate evidence collection and remediation tracking.
/liliAssess compliance with company's Energy cybersecurity standards and applicable country regulations, including NIS2.
/liliSupport control assessments and gap analyses.
/liliDevelop risk metrics, dashboards, and management reports.
/liliPrepare materials for management and governance reviews.
/liliEscalate significant cybersecurity risks and emerging trends.
/liliCollaborate with IT, Product Security, IAM, Legal, Procurement, Privacy, and business teams.




/liliProvide guidance on cybersecurity risk management processes and requirements.
/liliPromote cybersecurity awareness and risk-informed decision-making.
/li /ulh3Qualifications /h3ulliExperience in Information Security governance, risk management, compliance, and incident response.
/liliKnowledge of common cybersecurity frameworks and regulations, such as NIST, NIS2, ISO *****, and GDPR.
/liliCISSP, CISM, or an equivalent certification is desirable.
/liliFluency in both Italian and English.
/liliStrong communication and stakeholder management skills.
/liliAbility to work independently and collaborate with cybersecurity and business teams.
/li /ulh3Deliverables /h3ulliCybersecurity risk assessments and updated risk registers.
/liliRisk mitigation and remediation tracking.
/liliCybersecurity policies, standards, and control requirements.
/liliAudit evidence, control assessments, and gap analysis support.
/liliRisk metrics, dashboards, and management reports.
/liliGovernance review materials and cybersecurity reporting.
/li /ulh3Location Requirement /h3ulliOn-site presence at COET premises in San Donato Milanese, Italy, at least 3 times per month.
/li /ulh3Additional Information /h3ulliCategory: Information Security Compliance /liliEngagement Type: Independent Contractor /liliDuration: September 14, **** to September 14, **** /liliCountry: Italy /liliEngagement: Temporary, tempo parziale consulting opportunity /liliThe client is still evaluating the appropriate engagement structure.
The selected talent may ultimately be engaged through an Employer of Record (EOR) arrangement rather than as an Independent Contractor.
/liliCandidates should be comfortable proceeding under either engagement structure.
If EOR is selected, additional onboarding requirements and timelines may apply before the engagement begins.
/li /ul #J-*****-Ljbffr

📌 Cybersecurity Governance, Risk & Compliance (Grc) Consultant (Bardi)
🏢 Upwork
📍 Bardi