Cyber Security & Privacy Consultant

About Advantio Established in 2009, Advantio maintains an extensive team of consultants and security testing experts to provide digital security and assurance to its customers. Originally established as a payment compliance market leader, Advantio has grown from an established and leading payment security and compliance organisation in Europe to develop its comprehensive Cyber Security and Managed Security Services expertise – offering consultancy, products, and services to support organisations to first understand or their own cyber security related business risks and then by providing suitable and affordable solutions to manage those risks effectively and to remediate against threats proportionately. Advantio primarily serves the FinTech and Payment Card industries and is recognised by VISA as one of Europe’s top Qualified Security Assessor (QSA) providers. For more information about Advantio, visit https://www.advantio.com Role Mission: We are seeking an experienced Security Consultant to join our team to help ensure the delivery of Advantio’s consultancy, products and services, ensuring optimal quality and value to customers. This role will involve onsite delivery at our client sites so the ideal candidate will be located or within commutable distance to Milan. Key Responsibilities: Perform strategic consultancy services through identification of customer needs and scoping security solutions. Provide additional customer support to achieve compliance/certification against recognised standards such as ISO 27001, the GDPR and Advantio’s Cybersecurity Maturity Assessment. Independently conduct ISO/IEC 27001 implementation and audit activities. Lead Advantio Cybersecurity Maturity Assessment and Gap Analysis engagements. Conduct information asset discovery workshops and engagements. Conduct risk assessment workshops and engagements. Drive business continuity scenario tabletop exercises. Deliver external stakeholder training and awareness presentations. Mentor and train junior colleagues using expertise and experience. Define the scope of planned activities through review of available documentation and resources, including stakeholder interviews. Develop and deliver customer presentations to relay findings, recommendations, and progress reports. Attend customer meetings to review progress on longer term engagements and ensure that stakeholder expectations are being met. Provide support, advice and guidance when supervising or working with junior consultants. Provide support to Advantio’s internal compliance stakeholders to help ensure Advantio continues to successfully retain its ISO 27001 certification, or any other designated certifications. Skills & Knowledge: Degree level qualification in Computer Science, Computer Engineering, IT, Cyber Security, or a related field – or 5 years’ experience working within an information security role Fluency in both verbal and written English and Italian. Demonstrable experience communicating complex information security concepts to top level (C suite and above) management. Minimum 2 years experience in delivering consultative engagements using well known risk management and data security frameworks, standards, and methodologies. An aptitude for understanding and documenting complex business processes. A working knowledge of information governance concepts, including that of information assets, information asset ownership and data protection. The ability to develop high quality presentations, policies, and operating procedures. Ability to translate activities into easy-to-follow flow charts and processes. Experience in the following areas of information assurance: GDPR regulation ISO/ISEC 27001 Business Continuity Supplier Management Incident Management Physical Security ISO 27001 lead auditor or lead implementer qualification. Nice To Have: Understanding of Strategic Information Assurance and an ability to draft cyber security strategies. Experience with secure development frameworks. Exposure to multiple information security frameworks, for example: NIST CSF. A cloud-based information security qualification, such as CCSK or equivalent. Basic knowledge of computer networks (Firewall, Switch, router, OSI model, etc.). CISMP or equivalent qualification. CISM or CISSP qualification. Fluency in both verbal and written Spanish. Core Competencies: Planning and organisation. Analysis and problem solving. Attention to detail. Results orientation. Learning attitude. Time management. Task/goal oriented. Teamwork attitude. Customer orientation. Advantio Core Values: Harmony, always strive to create harmony Openness, always be open Social responsibility, be socially responsible Timeless, whatever you build make it timeless Accommodating, make our customers feel at home Learning, be a learn it all Delivering results J-18808-Ljbffr