Your key responsibilities
As a Cybersecurity Strategist, your responsibilities will include:
- Activities of assessment in the field of Cybersecurity (ISO 27001, NIST, etc.) with subsequent gap analysis.
- Definition of a remediation proposal and cybersecurity strategy to transform an "as is" state into the "to be" state required by the relevant compliance.
- Reporting and benchmarking of Technical solution to support remediation plan
- Activities of risk analysis and management.
- Drafting and production of the necessary documentation to implement the defined cybersecurity strategy.
- Updating company policies, procedures, and processes in accordance with the indicated cybersecurity strategy.
- Managing the various stakeholders involved in the process of transitioning to the outlined cybersecurity strategy.
- Activities of Cybersecurity Compliance & Security Governance.
- Promoting best practices and a mindset aimed at protecting company data.
Strong Analytical Skills:Ability to conduct comprehensive cybersecurity assessments, gap analyses, and risk evaluations with keen attention to detail.
Strategic Thinking:Capability to develop clear, actionable remediation plans and long-term cybersecurity strategies aligned with compliance frameworks such as ISO 27001 and NIST.
Technical Proficiency:Solid understanding of cybersecurity standards, regulations, and tools, enabling effective benchmarking and technical reporting.
Excellent Communication:Strong written and verbal communication skills to draft precise documentation, update policies, and engage with diverse stakeholders.
Problem-Solving Mindset:Aptitude for identifying security gaps and designing innovative solutions to mitigate risks effectively.
Language Proficiency:Fluent in both Italian and English to navigate technical documentation and communication in a bilingual environment
To qualify for the role, you must have
- 1-3 Years of experience required in Cybersecurity Strategy Risk and Compliance Activities
- Bachelor’s degree in related technology field (Computer, Engineering, Science, etc.)
- Knowledge of the main Cybersecurity standards and regulations (ISO 27001, NIS, National Cybersecurity Perimeter);
- Certifications related to the tasks will be a plus (e.g. Lead auditor ISO27001, CISA, CISM)
- Knowledge of Cybersecurity tools and methodologies;
- Problem solving, communication and teamworking skills;
- Proficency in Italian and English;
Ideally, you’ll also have
- Knowledge of Spanish language
- Experience with implementing cybersecurity tools and frameworks within complex organizational environments.
What we offer
Additionally, here’s what makes us stand out:
- Empowering Career Development : Unlock your potential with tailored training and development programs designed to elevate your skills and propel your career forward. We invest in your growth because your success is our success.
- Flexible Work-Life Integration : Enjoy the freedom of our hybrid work model, allowing you to blend professional responsibilities with personal passions. We understand that life is more than just work, and we support you in achieving that balance.
- Comprehensive Well-Being Programs : Prioritize your health with our extensive wellness initiatives, including psychological support sessions and health resources. At EY GDS Spain, your well-being is at the heart of what we do.
- Meaningful Volunteering Opportunities : Make a difference in your community through our engaging volunteering programs. Join us in giving back and creating a positive impact while building connections with like-minded colleagues.
- Recognized Performance and Rewards : Celebrate your achievements with our recognition programs that honor both individual and team successes. We believe in acknowledging hard work and dedication, ensuring you feel valued every step of the way.