Specialist Security Advisor

ppBorn in 2004 as Techedge, we have almost 20 years of expertise that enabled us to become what we are today: Avvale /ph3What We Do /h3pWe help public and private companies to re-design their business models through the development of innovative and sustainable solutions, which have a positive impact not only on our customers but also on the world we live in /ppThrough circular economy models, made possible thanks to technological innovation. /ph3What you will find /h3pIn Avvale we value our talents and your path with us will be full of: /pullibFlexibility /b, thanks to our policy you can work remotely in Italy, up to 5 days a week, and in SEE and Switzerland up to 5 months a year; /lilibTraining development /b as you can participate to training on the job, certifications, foreign languages classes and you will have a yearly budget to buy training courses; /lilibGender equality inclusion /b, the obtaining of Pdr 125 is a proof of Avvale commitment to an inclusive and fair work environment /li /ulh3Role and responsibilities /h3pWe are looking for a mid-level bCyber Security Specialist /b to join our Security team. Reporting directly to the Security Manager, this role will be pivotal in governing the company's defence infrastructure and overseeing compliance and data protection processes. /They will act as the operational liaison between the company, the external Security Service Providers and internal IT stakeholders, balancing technical operations with document and regulatory management. /pulliOversee and monitor key corporate security controls (XDR/EDR, Email Security Gateway, MDM, DNS Protection, DLP) and manage Level 2 activities through ITSM/Ticketing systems. /liliSupport the Security Manager in defining, implementing, and monitoring security policies, standards, and procedures, ensuring compliance with frameworks and regulations such as ISO 27001, NIST, and GDPR. /liliSupport Vulnerability Management activities by analysing scan results, prioritizing risks, and monitoring patching and remediation activities following Penetration Tests or Threat Hunting exercises. /liliContribute to GRC and Third-Party Risk Management activities, including reviewing Security Policies and SOPs, assessing vendors, and monitoring supply chain security posture. /liliSupport internal/external audits and assist in collecting the required documentation for compliance assessments and customer security reviews. /liliPromote cybersecurity awareness across the organization through training initiatives, phishing simulation campaigns, and tracking employee and contractor participation. /liliSupport the Security Manager in drafting, reviewing, and continuously updating Security Policies and SOPs in line with major regulatory frameworks. /liliMonitor the organization’s supply chain security posture through Cyber Threat Intelligence and Security Rating platforms, supporting Vendor Assessments through supplier questionnaire analysis and initial Gap Analysis activities. /liliSupport the completion of customer compliance questionnaires and assist in collecting evidence and documentation for internal and external audits. /liliContribute to promoting a cybersecurity-aware culture across the organization through training initiatives and awareness programs. /lili3-5 years of experience in similar roles such as Security Analyst, SecOps Specialist, or GRC Analyst, with a solid technical background. /liliPractical experience with SOC operations, Incident Management processes, and the Vulnerability Management lifecycle. /liliGood architectural understanding of modern security defenses for Endpoints, Email, Networks, and DLP technologies. /liliStrong familiarity with major security and privacy standards/frameworks, including GDPR, PCI-DSS, HIPAA (or equivalent), ISO 27001, and NIST. /liliKnowledge of IT Service Management (ITSM) processes. /liliExcellent communication skills, with the ability to effectively interact with external vendors and internal IT teams without direct hierarchical authority. /liliFluent knowledge of the English language /li /ulh3Come with us /h3pYou will have the opportunity to work and get in touch with international players who will allow you to increase your know-how in view of future challenges /We enhance diversity and are committed to creating an inclusive environment in compliance with applicable non-discrimination and data protection laws. /