Cyber Security Compliance Consultant

Das ist der Job

The role is covered by the CCNL Metalmeccanico Industria (CNEL code C011).

Darum lohnt es sich

Job Overview Join a team of experts dedicated to delivering innovative solutions and driving digital transformation for our clients.

How you'll make a difference • Support clients in achieving and maintaining compliance with cybersecurity regulations and standards such as NIS2, ISO/IEC 27001, TISAX, and GDPR. • Conduct cybersecurity assessments, GAP analyses, and risk assessments to identify remediation actions and improvement opportunities. • Design, implement, and maintain Information Security Management Systems (ISMS) aligned with international standards and best practices. • Conduct security assessments, GAP analyses, Business Impact Analyses (BIA), and Risk Assessments to identify critical processes, operational impacts, continuity requirements, and remediation actions. • Analyze business processes, operational dependencies, and critical systems to define business continuity parameters such as RTO, RPO, and MTPD. • Manage consulting engagements related to audit readiness, certification support, and regulatory compliance programs. • Act as a Virtual CISO (vCISO), providing strategic guidance on cybersecurity governance, risk management, and organizational security posture. • Develop cybersecurity policies, procedures, standards, and governance documentation. • Deliver training and awareness sessions on cybersecurity, compliance, and security best practices. • Monitor regulatory and compliance developments, advising clients on emerging requirements and their operational impact. • Work on high-impact cybersecurity and compliance projects. • Collaborate with experienced consultants and international teams. • Grow expertise across governance, risk, compliance, and cybersecurity domains. • Collaborate with technical and business stakeholders to integrate cybersecurity into organizational processes and digital transformation initiatives.

Benefits We offer a comprehensive benefits package designed to support your professional growth, personal well-being, and work‑life balance. • Welfare Package • Worklife Kit • Empowering People initiatives • Open Space, Open Mind office environment • Career Path development program • Learning & Development opportunities The gross annual salary for this position ranges from €35,000 to €50,000 and may be adjusted based on the candidate’s skills and experience beyond the required level.

What we’re looking for • 3–5 years of experience in cybersecurity consulting, compliance, governance, or information security management. • Strong knowledge of cybersecurity frameworks and regulations, including NIS2, ISO/IEC 27001, TISAX, GDPR. • Proven experience in security audits, risk assessments, GAP analyses, compliance programs. • Experience designing and implementing security governance frameworks and compliance processes. • Knowledge of Business Continuity and Disaster Recovery principles and related methodologies such as ISO 22301, ISO/TS 22317. • Strong analytical, organizational, and documentation skills. • Excellent communication and stakeholder management capabilities. • Ability to work independently and manage projects with varying timelines and priorities. • Client‑oriented mindset with a methodical and detail‑focused approach. • Availability to travel for short, medium, or long‑term assignments when required. • English proficiency at B2 level or higher.

What we would consider a plus • Degree in Computer Science, Engineering, Cybersecurity, Law, or a related field. • Professional certifications such as ISO/IEC 27001 Lead Auditor, ISO/IEC 27001 Lead Implementer, CISA, CISM, CISSP. • Previous experience as a Virtual CISO, Compliance Manager, or Information Security Manager. • Familiarity with risk management and business continuity methodologies such as ISO 31000, ISO/IEC 27005, NIST Cybersecurity Framework, ISO 22301. • Experience in regulated industries such as automotive, energy, manufacturing, healthcare, or financial services. • Experience with GRC platforms and interactions with certification/accreditation bodies. • Technical understanding of cloud security (AWS, Azure, GCP), SIEM and SOC environments, vulnerability management, network security architectures, identity and access management (IAM).