Security Governance specialist
Pubblicato il 16-10-2026 - Generali Group in Lucca
Within our Security structure, we are looking for a motivated and skilled Security Governance specialist with exposure to Artificial Intelligence to strengthen our security posture, enhance governance capabilities, and evolve risk management practices in alignment with strategic objectives, technological innovation, and external benchmarks. Key responsibilities * Manage security governance activities, including KPI reporting, risk assessments (IT and Cyber), and support to internal and external audits (NIS2, DORA, ISO frameworks) * Oversee third‑party security management end‑to‑end, ensuring alignment with contractual, regulatory, and internal policy requirements * Define and support the evolution of security standards, policies, and control frameworks in line with regulatory requirements and industry best practices * Monitor and maintain key certifications (ISO27001, ISO27035, ISAE3402) and ensure continuous compliance and control effectiveness * Support budgeting, financial tracking, and governance of the Security program portfolio, including coordination with Procurement, Legal,
and Finance * Leverage Artificial Intelligence to enhance security governance processes, including reporting, risk analysis, and control monitoring * Assess AI‑related risks and contribute to the definition of governance practices, ensuring alignment with regulatory and internal requirements * Track emerging technologies and integrate AI capabilities into security workflows to improve efficiency and decision‑making * Support alignment with cybersecurity operations by contributing to threat and vulnerability tracking, control effectiveness validation, and remediation monitoring * Promote security awareness initiatives and continuous improvement of the overall security posture Requirements * Degree in Computer Science, Engineering, Cybersecurity, Management Engineering, or equivalent * 2‑5 years of proven experience in Security Governance, IT Risk Management, Cybersecurity, or related field