Cyber Security Specialist

ppBorn in 2004 as Techedge, we have almost 20 years of expertise that enabled us to become what we are today: Avvale! /ppThis path led us to be able to count on over 4,000 employees, present in 13 countries around the world. /ph3What We Do /h3pWe help public and private companies to re-design their business models through the development of innovative and sustainable solutions, which have a positive impact not only on our customers but also on the world we live in! /ppThrough circular economy models, made possible thanks to technological innovation. /ph3What you will find /h3pIn Avvale we value our talents and your path with us will be full of: /pullibFlexibility /b, thanks to our policy you can work remotely in Italy, up to 5 days a week, and in SEE and Switzerland up to 5 months a year; /lilibTraining development /b as you can participate to training on the job, certifications, foreign languages classes and you will have a yearly budget to buy training courses; /lilibGender equality inclusion /b, the obtaining of Pdr 125 is a proof of Avvale commitment to an inclusive and fair work environment! /li /ulh3Role and responsibilities /h3pWe are looking for a mid-level bCyber Security Specialist /b to join our Security team. Reporting directly to the Security Manager, this role will be pivotal in governing the company's defence infrastructure and overseeing compliance and data protection processes. /ppThe ideal candidate has a solid technical foundation and a pragmatic approach to supporting Governance, Risk Compliance (GRC) processes. They will act as the operational liaison between the company, the external Security Service Providers and internal IT stakeholders, balancing technical operations with document and regulatory management. /pulliOversee and monitor key corporate security controls (XDR/EDR, Email Security Gateway, MDM, DNS Protection, DLP) and manage Level 2 activities through ITSM/Ticketing systems. /liliSupport the Security Manager in defining, implementing, and monitoring security policies, standards, and procedures, ensuring compliance with frameworks and regulations such as ISO 27001, NIST, and GDPR. /liliCoordinate operational activities with MSSPs and internal stakeholders, manage escalated alerts, and support Incident Response activities, including remediation tracking. /liliSupport Vulnerability Management activities by analysing scan results, prioritizing risks, and monitoring patching and remediation activities following Penetration Tests or Threat Hunting exercises. /liliContribute to GRC and Third-Party Risk Management activities, including reviewing Security Policies and SOPs, assessing vendors, and monitoring supply chain security posture. /liliSupport internal/external audits and assist in collecting the required documentation for compliance assessments and customer security reviews. /liliPromote cybersecurity awareness across the organization through training initiatives, phishing simulation campaigns, and tracking employee and contractor participation. /liliSupport the Security Manager in drafting, reviewing, and continuously updating Security Policies and SOPs in line with major regulatory frameworks. /liliMonitor the organization’s supply chain security posture through Cyber Threat Intelligence and Security Rating platforms, supporting Vendor Assessments through supplier questionnaire analysis and initial Gap Analysis activities. /liliSupport the completion of customer compliance questionnaires and assist in collecting evidence and documentation for internal and external audits. /liliContribute to promoting a cybersecurity-aware culture across the organization through training initiatives and awareness programs. /lili3–5 years of experience in similar roles such as Security Analyst, SecOps Specialist, or GRC Analyst, with a solid technical background. /liliPractical experience with SOC operations, Incident Management processes, and the Vulnerability Management lifecycle. /liliGood architectural understanding of modern security defenses for Endpoints, Email, Networks, and DLP technologies. /liliStrong familiarity with major security and privacy standards/frameworks, including GDPR, PCI-DSS, HIPAA (or equivalent), ISO 27001, and NIST. /liliKnowledge of IT Service Management (ITSM) processes. /liliExcellent communication skills, with the ability to effectively interact with external vendors and internal IT teams without direct hierarchical authority. /liliStrong analytical mindset, organizational autonomy, and accuracy in documentation and process management. /liliFluent knowledge of the English language /li /ulh3Come with us /h3pYou will have the opportunity to work and get in touch with international players who will allow you to increase your know-how in view of future challenges! /ppWe do not consider applications without CV. /ppAvvale promotes equal opportunity. We enhance diversity and are committed to creating an inclusive environment in compliance with applicable non-discrimination and data protection laws. /p /p #J-18808-Ljbffr