Group Security Assurance_Security Governance, Controls
Pubblicato il 19-10-2026 - HypoVereinsbank in Italia
Apply as Group Security Assurance_Security Governance, Controls & Third-Party Security SpecialistGeneral Information Job ID 114532 Company UniCredit S.p.A Competence Line Digital Country Italy City MILANO, ROMA Job Type Professional Functional area Security Working time model Full-time Contact Base Salary min (gross) 30.000 Base Salary max (gross) 50.000 We are seeking a Security Governance, Controls & Third-Party Security Specialist to support our Group Security function. In this role, you will contribute to the definition, implementation, and continuous improvement of the Group Security governance framework, ensuring alignment with regulatory requirements, security standards, and business priorities. You will play a key role in overseeing security controls, managing Third-Party Security activities, supporting regulatory initiatives, and strengthening the overall security posture across the Group. What you'll be doing * Define, maintain, and evolve Security policies, standards, guidelines, and governance frameworks across the Group * Coordinate and monitor Security controls, KPIs,
and governance processes to ensure effectiveness and compliance * Support the management of Third-Party Security assessments, contractual security requirements, and security exception processes * Perform security posture assessments, maturity evaluations, and gap analyses against internal policies and external regulations * Collaborate with Risk, Compliance, Audit, Legal, Data Protection, Digital and business stakeholders to ensure alignment on security activities * Support regulatory inspections, audits, consultations, and requests from supervisory authorities and institutions * Monitor remediation activities related to audit findings, regulatory observations, and security assessments * Provide analysis, reporting, and insights on security posture, controls effectiveness, and security governance metrics * Support the definition and evolution of Group Security standards, models, architect