Cyber Security Governance

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/8f041h

OverviewIn this role you drive the secure software development lifecycle across the organization, shaping security practices, controls, and metrics.
You partner with engineering and product teams to embed security by design and reduce risk, while leading initiatives that mature the company's application security posture.
You will engage with AI risk considerations and a fast-paced, cross-functional environment to deliver secure, high-quality software.
This position offers impact in a growth-focused, innovation-driven company with hybrid work in Milan or Rome.
Retribuzione / Benefits4-day week
Wellbeing Digital Wallet
personal wellbeing budget (travel, medical, parental support, sports)
hybrid work model
tailored learning paths
global/international exposure
ResponsabilitàDrive continuous improvement of the application security maturity across teams and products
Define, measure, and track security KPIs for vulnerability management and risk visibility
Lead application security initiatives and promote security-by-design from early development stages




Define and evolve security controls aligned with standards, regulations, and frameworks
Collaborate with Product Owners and development teams to align security with business priorities
Contribute to secure development lifecycle practices and guide engineering teams in security best practices
Read/review code and support SDLC with hands-on security expertise
Requisiti fondamentaliKnowledge of application security frameworks: SAMM, ASVS, NIST CSF
Understanding ISO *, NIS2, DORA, ACN, PCI-DSS and their impact on app security
Awareness of AI risk frameworks: NIST AI RMF, EU AI Act, ISO/IEC *, OWASP Top 10 for LLMs
Understanding AI-related risks and current AI landscape
Experience as software developer or security engineer; ability to read/review code (plus)
Familiarity with SAST, DAST, pen testing, dependency/vulnerability scanning (plus)
Strong knowledge of secure design principles: encryption, authentication/authorization, inp

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/8f041h