Cyber Security Compliance Consultant

Job Overview

Join a team of experts dedicated to delivering innovative solutions and driving digital transformation for our clients.

How you'll make a difference

• Support clients in achieving and maintaining compliance with cybersecurity regulations and standards such as NIS2, ISO/IEC 27001, TISAX, and GDPR.
• Conduct cybersecurity assessments, GAP analyses, and risk assessments to identify remediation actions and improvement opportunities.
• Design, implement, and maintain Information Security Management Systems (ISMS) aligned with international standards and best practices.
• Conduct security assessments, GAP analyses, Business Impact Analyses (BIA), and Risk Assessments to identify critical processes, operational impacts, continuity requirements, and remediation actions.
• Analyze business processes, operational dependencies, and critical systems to define business continuity parameters such as RTO, RPO, and MTPD.
• Manage consulting engagements related to audit readiness, certification support, and regulatory compliance programs.
• Act as a Virtual CISO (vCISO), providing strategic guidance on cybersecurity governance, risk management, and organizational security posture.
• Develop cybersecurity policies, procedures, standards, and governance documentation.
• Deliver training and awareness sessions on cybersecurity, compliance, and security best practices.
• Monitor regulatory and compliance developments, advising clients on emerging requirements and their operational impact.
• Work on high-impact cybersecurity and compliance projects.
• Collaborate with experienced consultants and international teams.
• Grow expertise across governance, risk, compliance, and cybersecurity domains.
• Collaborate with technical and business stakeholders to integrate cybersecurity into organizational processes and digital transformation initiatives.

What we’re looking for

• 3–5 years of experience in cybersecurity consulting, compliance, governance, or information security management.
• Strong knowledge of cybersecurity frameworks and regulations, including NIS2, ISO/IEC 27001, TISAX, GDPR.
• Proven experience in security audits, risk assessments, GAP analyses, compliance programs.
• Experience designing and implementing security governance frameworks and compliance processes.
• Knowledge of Business Continuity and Disaster Recovery principles and related methodologies such as ISO 22301, ISO/TS 22317.
• Strong analytical, organizational, and documentation skills.
• Excellent communication and stakeholder management capabilities.
• Ability to work independently and manage projects with varying timelines and priorities.
• Client‑oriented mindset with a methodical and detail‑focused approach.
• Availability to travel for short, medium, or long‑term assignments when required.
• English proficiency at B2 level or higher.

What we would consider a plus

• Degree in Computer Science, Engineering, Cybersecurity, Law, or a related field.
• Professional certifications such as ISO/IEC 27001 Lead Auditor, ISO/IEC 27001 Lead Implementer, CISA, CISM, CISSP.
• Previous experience as a Virtual CISO, Compliance Manager, or Information Security Manager.
• Familiarity with risk management and business continuity methodologies such as ISO 31000, ISO/IEC 27005, NIST Cybersecurity Framework, ISO 22301.
• Experience in regulated industries such as automotive, energy, manufacturing, healthcare, or financial services.
• Experience with GRC platforms and interactions with certification/accreditation bodies.
• Technical understanding of cloud security (AWS, Azure, GCP), SIEM and SOC environments, vulnerability management, network security architectures, identity and access management (IAM).

Benefits

We offer a comprehensive benefits package designed to support your professional growth, personal well-being, and work‑life balance.

• Welfare Package
• Worklife Kit
• Empowering People initiatives
• Open Space, Open Mind office environment
• Career Path development program
• Learning & Development opportunities

The gross annual salary for this position ranges from €35,000 to €50,000 and may be adjusted based on the candidate’s skills and experience beyond the required level. The role is covered by the CCNL Metalmeccanico Industria (CNEL code C011).