Cyber Risk Specialist

MSC Mediterranean Shipping Company is a global business engaged in the shipping sector. Present in 155 countries, MSC facilitates international trade between the world’s major economies, and among emerging markets across all continents. Headquartered in Geneva, Switzerland, since 1978, MSC is a privately-owned organisation driven by the Aponte family. Today, we continue to focus on caring for customers, employees and the environment.

From a one-vessel operation to a globally respected business we have an unfaltering commitment to people that have passion, creativity and willing to make a change.

MSC Technology Italy is the first division located in the national territory, complementing existing offices in Geneva (the Group's headquarters), Warren (New Jersey, USA), and Chennai (India).

MSC Technology embodies Passion and a commitment to Continuous Evolution, strongly believing in Equal Opportunities and Caring for its People—ultimately fostering a sense of Family within the Company.

With over 3,000 employees, our Technology Department plays a pivotal role in driving business growth and elevating the quality standards across our functional lines.

Working within an international office and engaging in cross-country collaboration offers the opportunity to connect with individuals boasting diverse technical skills, backgrounds, cultures, and professional experiences. International travel not only enriches your understanding of business and languages within the ICT realm but also provides avenues for personal and professional growth.

In 2020, MSC Technology Italy was established as a technological division of MSC with the goal of creating a Center of Excellence to support the MSC Group's business.

Do you recognize yourself? Then come work with us and be part of MSC’s family!

The Cyber Risk Specialist supports MSC Cargo's cybersecurity governance, risk, compliance, and audit activities within the Security Architecture department. Working as part of the CISO organization, the role contributes to maintaining compliance with regulatory and international standards, including the NIS2 Directive, ISO/IEC 27001, and ISO/IEC 22301, while supporting certification initiatives, internal audits, and continuous improvement across MSC's global legal entities. This position is ideal for professionals looking to develop a career in Cybersecurity Governance, Risk, Compliance (GRC), and Audit.

Key responsibilities

• Support cybersecurity compliance assessments against the NIS2 Directive, ISO/IEC 27001, ISO/IEC 22301, and internal security requirements.
• Identify compliance gaps and assist in tracking remediation activities to ensure timely resolution.
• Maintain compliance documentation, audit evidence, and governance records.
• Coordinate with internal stakeholders across MSC entities to collect required information and ensure compliance readiness.
• Support the execution of cybersecurity governance processes, policies, and standards across global subsidiaries.
• Assist in planning and coordinating internal cybersecurity audits, including interviews and evidence collection.
• Review audit documentation, track findings and corrective actions, and monitor progress through closure.
• Prepare reports and documentation to support management reviews, certification activities, and compliance initiatives.

Qualifications and experience

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field.
• Basic knowledge of cybersecurity governance, risk management, or compliance principles.
• Familiarity with one or more of the following: NIS2 Directive, ISO/IEC 27001, ISO/IEC 22301, AI Act, or other cybersecurity frameworks.
• Strong analytical and problem-solving skills with high attention to detail.
• Excellent organizational skills and ability to manage multiple priorities simultaneously.
• Effective written and verbal communication skills, with the ability to collaborate across international teams.
• Proactive, team-oriented mindset with a strong willingness to learn and develop in the cybersecurity GRC domain.
• Previous internship or experience in cybersecurity, IT risk, compliance, or audit is considered an advantage.

Diversity and Inclusion

This job posting is open to all individuals, regardless of gender, age, ethnic origin, nationality, sexual orientation, gender identity, disability, or any other personal characteristic, in compliance with applicable laws and regulations on equal opportunities and inclusion (Italian Legislative Decree No. 198/2006, as subsequently amended, and Italian Legislative Decrees No. 215/2003 and No. 216/2003).

In compliance with applicable pay transparency legislation, we provide the following information regarding the initial remuneration envisaged for this position.

The position will be classified within the Employee category, at one of the C2, C3, B1 or B2 levels under the Italian Metalworking Industry National Collective Bargaining Agreement (CCNL Metalmeccanico Industria).

The classification level and any additional remuneration components supplementing the base salary will be determined based on an assessment, carried out during the selection process, of objective and neutral criteria such as, by way of example, the candidate’s professional experience, technical skills, level of autonomy and the responsibilities required by the role.

What we offer

We offer a range of benefits including new Learning opportunities, a comprehensive Welfare System, Life and Health Insurance, Modern Workstation and Discounts within the MSC group.

Moreover, MSC Technology Italy fosters a culture of innovation and wellbeing by simultaneously pursuing various initiatives. These include Meetups, Technical and General Events such as Gaming Tournaments, Company Charity Initiatives and a Sustainability program designed to benefit all employees.

Our Company provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics.