Cybersecurity Commercial Support Specialist

Purpose of the position You will be part of the Cybersecurity Requirements, Resilience and Control (CYREC) technical unit, supporting processes related to the definition of internal policies, technical control activities to verify compliance with the defined policies, as well as the definition and support of plans to improve the Company’s security posture.

As “Cybersecurity Tender and Commercial Support Specialist”, you will primarily focus on supporting Tender and Commercial teams on cybersecurity-related activities.

The role focuses on supporting and supervising the tendering process and requires a deep understanding of the company’s cybersecurity processes and security posture in order to ensure adequate responses to the contractual cybersecurity requirements imposed by clients. This includes verifying their applicability and defining the appropriate costs to be included in bid proposals, ensuring compliance with contractual requirements.

Your Main Responsibilities Will Include

• Supporting Tender and Commercial teams in the analysis, interpretation, and incorporation of Clients contractual cybersecurity requirements during negotiation phases managing also queries and clarifications with the Clients.
• Verifying the achievability of Clients contractual cybersecurity requirements ensuring appropriate alignment with internal cybersecurity standards and governance frameworks.
• Contributing to the definition and validation of cybersecurity‑related costs to be included in bid proposals, to ensure proper budget allocation.
• Preparing and completing cybersecurity questionnaires and documentation requested by Clients during tender phases, through the analysis of internal documentation and, where necessary, the collection of evidence.
• Collaborating with internal stakeholders (e.g. Tendering, Commercial, Procurement, Legal, Privacy, Project teams) to ensure consistency between cybersecurity requirements, contractual commitments, and business processes throughout the tender lifecycle.

What are we looking for?

Experience

• 3+ years of hands‑on experience supporting compliance with cybersecurity requirements, standards, and regulatory frameworks, from a technical perspective.
• Previous experience in cybersecurity governance, compliance, commercial support or similar roles is appreciated but not mandatory.
• Prior exposure to tendering, procurement and supply chain activities and processes is considered a plus.

Languages

• Italian: native or at least C1 proficiency
• English: at least B2 level (written and spoken).

Technical & Professional Skills

• Ability to analyse bid documentation and contractual clauses with attention to detail.
• Capability to prepare clear and structured documentation and cost estimations.
• Familiarity with Procurement and Tendering processes is considered a preferred qualification.
• Interest in and good understanding of cybersecurity solutions and technologies.
• Previous knowledge or certifications in cybersecurity standards (e.g. ISO/IEC 27001, ISA/IEC 62443, NIST CSF2.0) are welcome but not required.

Soft Skills

• Structured and analytical mindset.
• Good communication skills and ability to interact with multiple stakeholders.
• Proactive attitude and willingness to learn.
• Ability to work both independently and as part of a team.

All interested candidates (L.903/03) are invited to consult the privacy policy (art. 13, D. Lgs. 196/03 and art. 13 GDPR 679/16)