Security Threat Assessment & Analysis Senior Professional

Milan, Italy

Apply by 1 Oct 2026

Competitive

Job Ref.: BH-58087

Job Description

Cybersecurity Governance, Risk & Compliance Consultant

Location: Milan, Italy
Work Model: Hybrid (3 days on-site per month in Milan)
Workload: 100%

We are seeking an experienced GRC Professional to support cybersecurity governance, risk management, compliance, and audit activities across its Italian operations.

Key Responsibilities
  • Conduct cybersecurity risk assessments and maintain risk registers
  • Assess security controls, vulnerabilities, and remediation plan
  • Support cybersecurity governance, policy development, and risk reporting
  • Assist with internal and external audits and regulatory compliance activities (NIS2, ISO 27001, GDPR, NIST)
  • Develop management reporting, dashboards, and risk metrics
  • Partner with IT, Security, Legal, Privacy, Procurement, and business stakeholders to drive cybersecurity best practices
Required Experience
  • Strong background in Cybersecurity Governance, Risk & Compliance
  • Experience performing security risk assessments and control reviews
  • Knowledge of NIST, ISO 27001, NIS2, GDPR, or similar frameworks
  • Experience supporting audits, compliance reviews, and remediation activities
  • Fluent in Italian and English
  • Relevant certifications such as CISSP, CISM, or CRISC are advantageous
 
Should you be interested, please send your application outlining your relevant experience and availability.


By applying for this role, you consent to SGI contacting you by telephone regarding recruitment services, market updates, and relevant business opportunities

We believe in equal opportunity for all and actively encourage applications from diverse backgrounds, experiences, and perspectives.
Source Group International Ltd is acting as an Employment Business in relation to this vacancy 

APPLY NOW

Similar Jobs.

Business Analyst -Data loss prevention - REMOTE
London, Greater London, South East, England

For our customer a Commodities Trader, we are seeking a Business Analyst with DLP (Purview) experience and NIS2 Compliance 6 month contract remote EU The Business Analyst is needed to support requirem

Infrastructure Security Engineer
Prague, Czech Republic

For our customer a major utilities business we are seeking an  Infrastructure & Application Security Engineer Role is 12 months + extension- this plays a key part in a major Security ProgrammePrague b

Application Security Engineer (Cyber)
London, United Kingdom (Britain / UK)

Application Security Engineer (Cyber) - Financial Services Contract - Inside I35 London - Hybrid Who we’re looking for Our clients Cyber Security team is looking for a Cybersecurity engineer with exp