Group Security Assurance_security Governance, Controls & Third-Party Security Specialist
Candidati come Group Security Assurance_Security Governance, Controls & Third-Party Security SpecialistJob IDSia tra i primi a candidarsi: legga la panoramica completa del ruolo qui sotto, quindi invii la sua candidatura per essere preso/a in considerazione.114532UniCredit S.P.ACompetence LineDigitalSecurityMILANO, ROMAProfessionalFull-timeContatto 30.00050.000We are seeking a Security Governance, Controls & Third-Party Security Specialist to support our Group Security function. In this role, you will contribute to thedefinition, implementation, and continuous improvement of the Group Security governance framework, ensuring alignment with regulatory requirements,security standards, and business priorities. You will play a key role in overseeing security controls, managing Third-Party Security activities, supportingregulatory initiatives, and strengthening the overall security posture across the Group.Define, maintain, and evolve Security policies, standards, guidelines, and governance frameworks across the GroupCoordinate and monitor Security controls, KPIs, and governance processes to ensure effectiveness and complianceSupport the management of Third-Party Security assessments, contractual security requirements, and security exception processesPerform security posture assessments, maturity evaluations, and gap analyses against internal policies and external regulationsCollaborate with Risk, Compliance, Audit, Legal, Data Protection, Digital and business stakeholders to ensure alignment on security activitiesSupport regulatory inspections, audits, consultations, and requests from supervisory authorities and institutionsMonitor remediation activities related to audit findings, regulatory observations, and security assessmentsProvide analysis, reporting,
and insights on security posture, controls effectiveness, and security governance metricsSupport the definition and evolution of Group Security standards, models, architectures, baselines and guidelines, fostering their consistent adoptionacross the organizationDegree in Cyber Security, Computer Science, Information Technology, Engineering, or equivalent practical experienceExperience in Security Governance, Information Security, Cyber Risk Management, Third-Party Security, or related areasKnowledge of security frameworks, security controls, risk management methodologies, and governance processesStrong analytical and problem-solving skills with the ability to translate regulatory and business requirements into actionable security initiativesExperience working with cross-functional stakeholders in complex and regulated environmentsStrong communication and presentation skillsAbility to manage xysqume multiple priorities and coordinate activities across different teamsProficiency in English (written and spoken)Nice to have:Familiarity with regulatory frameworks and security standards (e.G. DORA, NIS2, EBA Guidelines, ISO 27001, NIST)Knowledge of Audit, Compliance, Data Protection, and Operational Risk processesProfessional certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor, or equivalentExperience in Security Portfolio Management, Security Controls Monitoring, or Security Assurance activitiesCosa ti offriamo#MakeInnovationHappen: Chance to make an impact in terms of transformation#UnlockYourPotential: Join a young and stimulating environment#ComeAsYouAre: Working within a global team#UnlockYourPotential: Play a role of autonomy with high visibility and exposureAbout UniCredit Group#J-18808-Ljbffr
and insights on security posture, controls effectiveness, and security governance metricsSupport the definition and evolution of Group Security standards, models, architectures, baselines and guidelines, fostering their consistent adoptionacross the organizationDegree in Cyber Security, Computer Science, Information Technology, Engineering, or equivalent practical experienceExperience in Security Governance, Information Security, Cyber Risk Management, Third-Party Security, or related areasKnowledge of security frameworks, security controls, risk management methodologies, and governance processesStrong analytical and problem-solving skills with the ability to translate regulatory and business requirements into actionable security initiativesExperience working with cross-functional stakeholders in complex and regulated environmentsStrong communication and presentation skillsAbility to manage xysqume multiple priorities and coordinate activities across different teamsProficiency in English (written and spoken)Nice to have:Familiarity with regulatory frameworks and security standards (e.G. DORA, NIS2, EBA Guidelines, ISO 27001, NIST)Knowledge of Audit, Compliance, Data Protection, and Operational Risk processesProfessional certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor, or equivalentExperience in Security Portfolio Management, Security Controls Monitoring, or Security Assurance activitiesCosa ti offriamo#MakeInnovationHappen: Chance to make an impact in terms of transformation#UnlockYourPotential: Join a young and stimulating environment#ComeAsYouAre: Working within a global team#UnlockYourPotential: Play a role of autonomy with high visibility and exposureAbout UniCredit Group#J-18808-Ljbffr