Information Security Expert

‎

As an Information Security Manager, you will play a key role in strengthening Kuehne+Nagel's cybersecurity posture by leading security governance, risk management, and compliance initiatives, with a particular focus on the implementation of the EU NIS2 Directive and its Italian transposition. You will work closely with IT, business stakeholders, Legal, Compliance, and the EMEA Information Security organization to ensure regulatory compliance, reduce cyber risks, and drive a resilient security culture throughout the organization.

How you create impact

• Lead the implementation of NIS2 requirements, including gap assessments, remediation plans, and compliance monitoring.
• Establish and maintain information security governance, policies, and controls aligned with Global and EMEA Information Security standards.
• Conduct security risk assessments, oversee risk treatment plans, and monitor control effectiveness.
• Coordinate security incident management and regulatory reporting activities in collaboration with IT, Legal, Compliance, and cybersecurity teams.
• Support internal and external audits, regulatory inspections, and compliance reviews, ensuring timely remediation of findings.
• Drive third-party and supply chain security risk management, including supplier assessments and due diligence activities.
• Define, monitor, and report security KPIs and risk metrics to local leadership and EMEA Information Security management.
• Deliver security awareness initiatives and promote a culture of cybersecurity and compliance across the organization.

What we would like you to bring

• Degree in Information Security, Computer Science, Engineering, Law/Compliance, or equivalent professional experience.
• Proven experience in Information Security Governance, Risk & Compliance (GRC), cybersecurity, or related security functions.
• Experience implementing security frameworks and regulatory requirements, ideally NIS2, ISO 27001, NIST CSF, or CIS Controls.
• Strong knowledge of information security risk management, ISMS processes, and audit readiness.
• Good understanding of cybersecurity domains such as vulnerability management, IAM, SIEM, endpoint security, network security, backup and recovery, and encryption.
• Excellent stakeholder management, communication, and project management skills, with the ability to engage technical and non-technical audiences.
• Relevant certifications such as CISSP, CISM, CRISC, or ISO 27001 Lead Implementer/Auditor are considered an advantage.
• Fluent English and professional Italian are required.

What's in it for you

By joining the Kuehne+Nagel team, you will have the opportunity to work in a safe and stable environment, with a strong focus on physical and mental well-being. We offer professional growth and development opportunities, including at an international level.

Joining Kuehne+Nagel means being part of a company that genuinely invests in people:

• Development first – real opportunities for learning and growth.
• Teamwork that matters – experienced colleagues ready to support you.
• Innovation encouraged – we welcome new ideas and continuous improvement.
• Healthy balance – a supportive and flexible work environment.