Information Risk Management Consultant Montà

Information Risk Management Consultant
Montà
Piemonte, Montà

HSPI S. p. A. is a management consulting company founded in 2003 through the initiative of a small group of professionals with significant experience in leading multinational consulting companies.

HSPI, thanks to the strong skills of the professionals who set it up, has always characterized for an operating model capable of integrating distinctive Management Consulting skills with specialist knowledge in the ICT and Digital Innovation fields.

Since October 2020 HSPI is part of TXT Group and offer an extended range of professional services in Business Consulting, IT Strategy and Governance and Digital Innovation.

**Information Risk Management Consultant**:

HSPI, a management Consulting Company and part of the TXT Group, is looking for resources to be included in the role of Information Risk Management Consultant in the Rome office.

**Main responsibilities**:

Support definition and integration of IT Risk Analysis models;

Support to the revision or development of management systems ISO/IEC 27001, ISO 22301;

Review, definition of requirements, design of security architectures development of control frameworks based on the main international and national frameworks (NIST, SANS, ENISA, ISO, ISACA, CIS-CSC, CSA, etc.

);

Development of strategies and plans for business continuity and disaster recovery business impact analysis,

Design and implementation of control systems in GDPR, Sarbanes - Oxley, D. Lgs 231/01, IVASS, etc.

;

IT Audit or assessment activities for the evaluation of the design and effectiveness of controls on business and IT processes.

**Technical Requirements**:

Knowledge of the main information security frameworks (ISO/IEC 27001 / 27002, NIST Cybersecurity Framework, CIS-CSC (ex SANS 20));

Knowledge of the main information security regulations (GDPR, AGID Minimum Measures, NIS Directive, IVASS art.

38, 285/I/IV/4 Bank of Italy, . . . );

The resource should have a Bachelor's Degree in Engineering, Computer Science, Mathematics, Telecommunications, physics, chemistry, economics or equivalent disciplines and minimum 3 years of experience in one or more of the following areas:

IT service management / information security / business continuity processes

Management of networks and/or information systems

Design of IT security systems/processes.

The professional will be placed in projects carried out for public and private clients of large size and primary importance to the country.

There is the possibility of hybrid work mode.

It is offered a permanent contract and the opportunity to experience in an international group.

A customized training plan is offered, aimed at obtaining prestigious international certifications (ISO/IEC 2000 Lead Auditor, ISO/IEC 22301 Lead Auditor, CISM, CISA, CRISC, CSX, ITIL4, Prince2, AgilePM).

LI-Hybrid

HSPI