Junior Cyber Security GRC Consultant

Junior Cyber Security GRC Consultant

City: Roma

Location: Roma, Italy, 00144

Contract Type: Permanent

Division: Operating Engine

Level of experience: Junior

RINA is currently recruiting for a Junior Cyber Security GRC Consultant to join its office in ROME, GENOA OR MILAN within the Operating Engine Division.

Mission

The Cyber Security GRC Consultant focuses on contributing to the development, implementation, and maintenance of governance, risk, and compliance programs, ensuring that our organization and clients maintain robust information security and regulatory compliance.

Key Accountabilities

The selected candidate will be responsible for:

• Identifying security risks in organizations and complex systems/architectures;
• Designing security measures and providing recommendations to improve security posture;
• Ensuring compliance with laws, regulations, and cybersecurity standards;
• Supporting customers in cybersecurity-related activities;
• Drafting technical reports (often in English);
• Maintaining and updating RINA cybersecurity guidelines and assessment methodologies;
• Providing technical support for business development, including drafting proposals and defining services;
• Coordinating junior staff when applicable.

Education

Bachelor’s Degree in Information Systems or Cyber Security

Qualifications

• At least 1 year of experience in cybersecurity, with proven expertise in GRC topics, GDPR technical aspects, and knowledge of relevant standards/regulations;
• Strong knowledge of laws, regulations, international standards, and best practices (e.g. NIS2 Directive, GDPR, ISO 27000 family of standards, NIST Cybersecurity Framework, etc.);
• Experience in Governance, Risk & Compliance activities, in particular in cyber risk assessment and identification of security measures (physical, procedural, personal and, of course, technical);
• Ability to identify and analyze information security risks in diverse contexts, with a specific focus on risks related to outsourced services;
• Excellent problem-solving skills;
• Strong verbal and written communication skills in Italian and English;
• Flexibility and ability to manage multiple tasks in a fast-paced environment;
• Willingness to travel domestically and internationally.
• One or more recognized security certifications (e.g. ISO/IEC 27001:2022 Lead Auditor, ISACA CISM/CISA/CRISC, ISC² CISSP, Data Protection Officer, etc.);
• Knowledge of security tools and platforms;
• Previous experience with security certification processes for Information Security Management Systems (ISO/IEC 27001).

Company Values

• WORKPLACE DYNAMICS - Resourcefulness in shaping progress and working efficiently.
• PERSONAL EMPOWERMENT - Ownership for life, work and results, striving to grow professionally and personally.
• INTERPERSONAL INFLUENCE - Skills and strategies we use to interact effectively with others.
• DOMAIN & BUSINESS ACUMEN - Applying a scientific approach and critical thinking in operations and solution development within area of expertise.
• FORESIGHT & INSIGHT - Context awareness adopting a systemic perspective and informed decision making.

RINA is a multinational company providing a wide range of services in the energy, marine, certification, infrastructure & mobility, industry, research & development sectors. Our business model covers the full process of project development, from concept to completion.

At RINA, we endeavor to create a work environment where every single person is valued and encouraged to develop new ideas. We provide equal employment opportunities and are committed to creating a workplace where everyone feels respected and safe from discrimination or harassment of any kind. We are also compliant to the Italian Law n. 68/99.