Cyber Security Governance

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/8ofyge

h3Overview /h3 pIn this role you drive the secure software development lifecycle across the organization, shaping security practices, controls, and metrics. You partner with engineering and product teams to embed security by design and reduce risk, while leading initiatives that mature the company’s application security posture. You will engage with AI risk considerations and a fast-paced, cross-functional environment to deliver secure, high-quality software. This position offers impact in a growth-focused, innovation-driven company with hybrid work in Milan or Rome. /p h3Retribuzione / Benefits /h3 ul li4-day week /li liWellbeing Digital Wallet /li lipersonal wellbeing budget (travel, medical, parental support, sports) /li lihybrid work model /li litailored learning paths /liliglobal/international exposure /li /ul h3Responsabilità /h3 ul liDrive continuous improvement of the application security maturity across teams and products /li liDefine, measure, and track security KPIs for vulnerability management and risk visibility /li liLead application security initiatives and promote security-by-design from early development stages /li liDefine and evolve security controls aligned with standards, regulations,



and frameworks /li liCollaborate with Product Owners and development teams to align security with business priorities /li liContribute to secure development lifecycle practices and guide engineering teams in security best practices /li liRead/review code and support SDLC with hands-on security expertise /li /ul h3Requisiti fondamentali /h3 ul liKnowledge of application security frameworks: SAMM, ASVS, NIST CSF /li liUnderstanding ISO 27000, NIS2, DORA, ACN, PCI-DSS and their impact on app security /li liAwareness of AI risk frameworks: NIST AI RMF, EU AI Act, ISO/IEC 23894, OWASP Top 10 for LLMs /li liUnderstanding AI-related risks and current AI landscape /li liExperience as software developer or security engineer; ability to read/review code (plus) /li liFamiliarity with SAST, DAST, pen testing, dependency/vulnerability scanning (plus) /li liStrong knowledge of secure design principles: encryption, authentication/authorization, input filtering /li liAdvanced English (C1) /li /ul ul licollaboration /li licuriosity/continuous learning /li liproactive mindset /li liapplication security frameworks (SAMM, ASVS, NIST CSF) /li liAI risk and security concepts (NIST AI RMF, EU AI Act) /li lithreat modeling /li /ul #J-18808-Ljbffr

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/8ofyge