Cyber Risk Specialist

The Cyber Risk Specialist supports MSC Cargo's cybersecurity governance, risk, compliance, and audit activities within the Security Architecture department. Working as part of the CISO organization, the role contributes to maintaining compliance with regulatory and international standards, including the NIS2 Directive, ISO/IEC 27001, and ISO/IEC 22301, while supporting certification initiatives, internal audits, and continuous improvement across MSC's global legal entities. This position is ideal for professionals looking to develop a career in Cybersecurity Governance, Risk, Compliance (GRC), and Audit.

Key responsibilities

• Support cybersecurity compliance assessments against the NIS2 Directive, ISO/IEC 27001, ISO/IEC 22301, and internal security requirements.
• Identify compliance gaps and assist in tracking remediation activities to ensure timely resolution.
• Maintain compliance documentation, audit evidence, and governance records.
• Coordinate with internal stakeholders across MSC entities to collect required information and ensure compliance readiness.
• Support the execution of cybersecurity governance processes, policies, and standards across global subsidiaries.
• Assist in planning and coordinating internal cybersecurity audits, including interviews and evidence collection.
• Review audit documentation, track findings and corrective actions, and monitor progress through closure.
• Prepare reports and documentation to support management reviews, certification activities, and compliance initiatives.