Information Security GRC Specialist (Robotics)

Location: Genoa, Italy; onsite, full-time and permanent. National and international travel is expected.

Company

hirify.global is a deep-tech company developing humanoid robot platforms for human-centered Physical AI in real-world environments.

What you will do

• Develop and continuously improve the information security governance framework, including policies, standards, procedures, risk assessments, and control requirements.
• Translate cybersecurity, privacy, resilience, product security, and regulatory requirements into practical organizational, technical, and product controls.
• Track remediation plans and residual risk across business processes, IT environments, cloud services, products, and third parties.
• Define security KPIs and KRIs, prepare management reporting, and escalate material issues to governance forums.
• Support audits, certifications, security assessments, evidence collection, incident governance, and corrective-action tracking.
• Advise engineering, technology, legal, operations, and business teams on security-by-design, product cybersecurity, third-party risk, and security culture initiatives.

Requirements

• Bachelor’s or master’s degree in a scientific or humanities discipline, or equivalent professional experience.
• At least 3 years of experience in information security governance, risk management, compliance, internal audit, or comparable cybersecurity functions.
• Understanding of ISO/IEC 27001, NIST Cybersecurity Framework, CIS Controls, or equivalent security frameworks.
• Experience developing security policies, standards, procedures, risk registers, control frameworks, remediation plans, and audit evidence.
• Strong analytical, organizational, documentation, communication, and stakeholder management skills across technical and non-technical teams.
• Professional proficiency in English is required.

Nice to have

• Experience with ISO/IEC 27001 implementation and certification projects.
• Background in manufacturing, industrial automation, automotive, aerospace, IoT, embedded systems, or critical infrastructure.
• Knowledge of secure development lifecycle, vulnerability management, product cybersecurity, cloud governance, identity and access management, or supplier security.
• ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, or equivalent certification.

Culture & Benefits

• Work on humanoid robotics at the intersection of AI, robotics, software, electronics, and manufacturing.
• Collaborative, multidisciplinary, fast-paced, and innovation-driven environment.
• Direct exposure to strategic programs influencing product development and company growth.
• Professional development and career advancement opportunities.
• Competitive compensation aligned with experience.