Security Governance specialist
Pubblicato il 16-08-2026 - Generali Italia in Roma
Within our Security structure, we are looking for a motivated and skilled Security Governance specialist with exposure to Artificial Intelligence to strengthen our security posture, enhance governance capabilities, and evolve risk management practices in alignment with strategic objectives, technological innovation, and external benchmarks.
I candidati sono invitati a leggere attentamente tutti gli elementi di questo annuncio. La preghiamo di inviare la sua candidatura tempestivamente.
Key responsibilities
Manage security governance activities, including KPI reporting, risk assessments (IT and Cyber), and support to internal and external audits (NIS2, DORA, ISO frameworks)
Oversee third‑party security management end‑to‑end, ensuring alignment with contractual, regulatory, and internal policy requirements
Define and support the evolution of security standards, policies, and control frameworks in line with regulatory requirements and industry best practices
Monitor and maintain key certifications (ISO27001, ISO27035, ISAE3402)
and ensure continuous compliance and control effectiveness
Support budgeting, financial tracking, and governance of the Security program portfolio, including coordination with Procurement, Legal, and Finance
Leverage Artificial Intelligence to enhance security governance processes, including reporting, risk analysis, and control monitoring
Assess AI‑related risks and contribute to the definition of governance practices, ensuring alignment with regulatory and internal requirements
Track emerging technologies and integrate AI capabilities into security workflows to improve efficiency and decision‑making
Support alignment with cybersecurity operations by contributing to threat and vulnerability tracking, control effectiveness validation, and remediation monitoring
Promote security awareness initiatives and continuous improvement of the overall security posture
Requirements
Degree in Computer Science, Engineering, Cybersecurity, Management Engin