Cyber Security Manager - Provincia di Ancona

Michael Page - Define the GRC strategy: design and implement compliance programs (e.g. ISO 27001, NIS2, CMMC) and manage audits and relations with stakeholders. - Risk management: develop a unified IT/OT risk register, monitor key indicators, and provide quantitative analysis to top management. - Integrated protection: extend the security framework to production facilities, applying standards for industrial systems. - Supply Chain Security: lead the critical supplier evaluation program. - Minimum 5 years in cybersecurity, of which at least 3 in GRC roles. - Experience in managing ISMS based on ISO/IEC 27001. - Competencies in risk assessment and management of security policies and standards. - A plus would be knowledge of NIS2, CMMC, OT/ICS security, modern GRC platforms, certifications (CISSP, CISM, CRISC). - Excellent interaction skills with management. The company is a well-established industrial group with international presence, focused on innovation and quality. - Competitive remuneration commensurate with experience. - Professional growth opportunities. Except in the case where you present your candidacy for reserved positions under Law 68/99 (in which case we ask you to only confirm your membership in such categories without any further information regarding health or disability), your application must not contain information related to your state of health, including potential membership in a protected category, as it is not relevant to the evaluation of your candidacy. Sector: Other Role: Other