Compliance & Regulatory Affairs Manager

We are a  European Cloud & Cybersecurity Provider supporting medium-sized and large companies in managing and protecting their IT ecosystems.

Through highly reliable Cloud services, advanced Cybersecurity solutions, we help organizations ensure business continuity, security and digital innovation every day.

With offices across Italy, France, Spain and Switzerland, we combine an international mindset with strong local expertise, supporting customers through a team of skilled professionals and cutting-edge technologies.

What drives us is not only what we do, but  how we do it : we believe in  collaboration  across teams and countries,  transparency  in the way we work and communicate, and  accountability  in delivering concrete and reliable results for our internal and external customers.

As part of the growth of our Corporate Legal Affairs Department, we are looking for a Compliance & Regulatory Affairs Manager responsible for overseeing the company's regulatory compliance in the technological and digital domain, leading complex compliance projects and balancing compliance needs with the business's transformation and growth objectives

Responsibilities of the selected candidate include:

• Coordinate projects to align company processes and policies with the main European digital regulatory frameworks: DORA, NIS 2 (Legislative Decree 138/2024 and ACN implementing rules), AI Act, Data Act, Cyber Resilience Act, AGID guidelines and implementing rules, GDPR.
• Assess the potential impact of new regulations and define adaptation plans of current company standards to avoid any delay in implementing all required measures & carry out ex post analysis verifying the adequacy of processes and the effectiveness of controls
• Define and update company policies and procedures on ICT governance, cybersecurity, data governance and AI governance cooperating with all departments
• Develop and apply compliance risk assessment methodologies, including AI risk assessment and third-party risk management.
• Manage relationships with supervisory and sector regulatory authorities, coordinating responses, institutional communications and compliance obligations.
• Support business and technology functions in embedding compliance requirements into processes and services (compliance by design).

• Define, together with HRO, contents and timings for training on RA compliance within Reevo Group.Participate, together with other Sales and Channel sales teams, to the definition of the Sales strategy in order to maximize results.

  
  
   

The ideal candidate meets the following requirements:

Hard Skills:

• At least 5-7 years in RA compliance and/or risk management roles, preferably in regulated sectors (financial, insurance, telecoms, cloud/cybersecurity) or specialist consulting firms. 
• Experience leading end-to-end regulatory compliance projects, with project management skills and coordination of cross-functional stakeholders. 
• Experience reporting to corporate bodies and managing relationships with supervisory authorities.

• In-depth knowledge of the main European digital regulations: GDPR, DORA, NIS 2, AI Act, Data Act, Cyber Resilience Act and of AGID guidelines and implementing rules.

  For each framework the following depth of knowledge is needed:

  (i) NIS 2 / D.Lgs. 138/2024: full command of the ACN implementing rules ( Determinazioni ACN ), categorization workflow, minimum security measures across relevance levels, supply chain obligations, and incident notification timelines;

  (ii) AGID: knowledge of AGID Guidelines on PEC, interoperability, cloud qualification, and security measures applicable to public-administration suppliers;

  (iii) AI Act: risk-classification logic, obligations for high-risk AI systems, conformity assessment procedures, and requirements for general-purpose AI models;

  (iv) Data Act and Data Governance Act: data-sharing obligations, access rights of users and public bodies, contractual requirements, and interplay with GDPR;

  (v) GDPR: accountability framework, DPIA methodology, records of processing activities, data breach management, and DPA interaction;

  (vi) DORA: ICT risk management framework, ICT third-party risk, TLPT requirements, and register of contracts with ICT providers.

• Familiarity with cybersecurity governance, ICT risk and data governance frameworks. Preferred: knowledge of GRC systems and compliance monitoring tools.

Language Skills:

• Good command of Italian and English (C1), both written and spoken is mandatory;

• Good command of French and/or Spanish is a plus.

Soft Skills:

• Leadership and management of complex projects;
• cross-functional stakeholder coordination;
• strong analytical and problem-solving skills;
• communication and relationship management

Why Join Us:

We believe people perform at their best when they can grow, collaborate and maintain a healthy work-life balance.
For this reason, we offer:

• Flexible working approach and smart working opportunities;
• Meal vouchers;
• Welfare programs;
• Health and accidentes insurance coverage;
• Dedicate budget for learning, growth and development;
• Compensation and benefit packages aligned with role, responsibilities and local policies.

If you enjoy challenges and actively contribute to company success, we are the right place for you!

Workplace : Vimercate (MB)/Hybrid

How to Apply

Please send your CV and a short presentation to:

#LI-NB1

Settore: Informatica

Ruolo: Altro

CCNL applicato: COMMERCIO - Confcommercio

Salario mensile: EUR 3600 - EUR 4400

Tipo di occupazione: Contratto a tempo indeterminato