Cyber Security Compliance Consultant

We are seeking a skilled Cyber Security Compliance Consultant to join our dynamic team. You’ll work with cutting-edge technology solutions, helping our clients optimize their business processes and drive digital transformation.

As part of our Cybersecurity division, you’ll have the opportunity to work on diverse projects across multiple industries, collaborating with international teams and growing your expertise in enterprise solutions.

Join a team of experts dedicated to delivering innovative solutions and driving digital transformation for our clients.

• Support clients in achieving and maintaining compliance with cybersecurity regulations and standards such as NIS2, ISO/IEC 27001, TISAX, and GDPR.
• Conduct cybersecurity assessments, GAP analyses, and risk assessments to identify remediation actions and improvement opportunities.
• Design, implement, and maintain Information Security Management Systems (ISMS) aligned with international standards and best practices.
• Conduct security assessments, GAP Analyses, Business Impact Analyses (BIA), and Risk Assessments to identify critical processes, operational impacts, continuity requirements, and remediation actions.
• Analyze business processes, operational dependencies, and critical systems in order to define business continuity parameters such as RTO, RPO, and MTPD.
• Manage consulting engagements related to audit readiness, certification support, and regulatory compliance programs.
• Act as a Virtual CISO (vCISO), providing strategic guidance on cybersecurity governance, risk management, and organizational security posture.
• Develop cybersecurity policies, procedures, standards, and governance documentation.
• Deliver training and awareness sessions on cybersecurity, compliance, and security best practices.
• Monitor regulatory and compliance developments, advising clients on emerging requirements and their operational impact.
• Work on high-impact cybersecurity and compliance projects.
• Collaborate with experienced consultants and international teams.
• Grow your expertise across governance, risk, compliance, and cybersecurity domains.
• Collaborate with technical and business stakeholders to integrate cybersecurity into organizational processes and digital transformation initiatives.

• 3–5 years of experience in cybersecurity consulting, compliance, governance, or information security management.
• Strong knowledge of cybersecurity frameworks and regulations, including: NIS2, ISO/IEC 27001, TISAX, GDPR.
• Proven experience in: Security audits, Risk assessments, GAP analyses, Compliance programs.
• Experience in designing and implementing security governance frameworks and compliance processes.
• Knowledge of Business Continuity and Disaster Recovery principles and related methodologies (e.g. ISO 22301, ISO/TS 22317).
• Strong analytical, organizational, and documentation skills.
• Excellent communication and stakeholder management capabilities.
• Ability to work independently and manage projects with varying timelines and priorities.
• Client-oriented mindset with a methodical and detail-focused approach.
• Availability to travel for short-, medium-, or long-term assignments when required.
• English proficiency at B2 level or higher.

• Degree in Computer Science, Engineering, Cybersecurity, Law, or a related field.
• Professional certifications such as: ISO/IEC 27001 Lead Auditor, ISO/IEC 27001 Lead Implementer, CISA, CISM, CISSP.
• Previous experience as a Virtual CISO, Compliance Manager, or Information Security Manager.
• Familiarity with risk management and business continuity methodologies such as: ISO 31000, ISO/IEC 27005, NIST Cybersecurity Framework, ISO 22301
• Experience in regulated industries such as automotive, energy, manufacturing, healthcare, or financial services.
• Experience with GRC platforms and interactions with certification/accreditation bodies.
• Technical understanding of: Cloud security (AWS, Azure, GCP), SIEM and SOC environments, Vulnerability management, Network security architectures, Identity and Access Management (IAM).

• Work on high-impact cybersecurity and compliance projects.
• Collaborate with experienced consultants and international teams.
• Grow your expertise across governance, risk, compliance, and cybersecurity domains.
• Exposure to multiple industries and enterprise environments.
• Continuous professional development and certification opportunities.
• Dynamic and innovation-driven work environment.

The gross annual salary for this position ranges from €35,000 to €50,000. It may be adjusted based on the candidate’s skills and experience beyond the required level. The role is covered by the CCNL Metalmeccanico Industria (CNEL code C011).

We offer a comprehensive benefits package designed to support your professional growth, personal well-being, and work-life balance.

A comprehensive corporate welfare platform, offering a wide range of benefits and healthcare support.

A complete welcome package with all essentials for day-to-day productivity, complemented by comprehensive benefits. We offer digital meal vouchers and flexible reimbursement options to support both your work and personal needs.

Engagement initiatives, team building, and mentoring programs designed to foster integration, knowledge sharing, and meaningful connections.

Modern open-space offices and collaborative areas that encourage interaction and teamwork.

With our internal Changemaker Path methodology, you'll grow key relational, communication, and leadership skills, that will help you evolve in a way that truly fits you.

Continuous improvement programs, certification opportunities, and incentives to help you grow both your soft and hard skills to unlock your full potential.