Group Security Assurance_Security Governance, Controls & Third-Party Security Specialist
Candidati come Group Security Assurance_Security Governance, Controls & Third-Party Security Specialist
Job ID
UniCredit S.p.A
Competence Line
Digital
Security
MILANO, ROMA
Professional
Full-time
Contatto
******
******
We are seeking a Security Governance, Controls & Third-Party Security Specialist to support our Group Security function.
In this role, you will contribute to the
definition, implementation, and continuous improvement of the Group Security governance framework, ensuring alignment with regulatory requirements,
security standards, and business priorities.
You will play a key role in overseeing security controls, managing Third-Party Security activities, supporting
regulatory initiatives, and strengthening the overall security posture across the Group.
Define, maintain, and evolve Security policies, standards, guidelines, and governance frameworks across the Group
Coordinate and monitor Security controls, KPIs, and governance processes to ensure effectiveness and compliance
Support the management of Third-Party Security assessments, contractual security requirements, and security exception processes
Perform security posture assessments, maturity evaluations, and gap analyses against internal policies and external regulations
Collaborate with Risk, Compliance, Audit, Legal, Data Protection, Digital and business stakeholders to ensure alignment on security activities
Support regulatory inspections, audits, consultations, and requests from supervisory authorities and institutions
Monitor remediation activities related to audit findings, regulatory observations, and security assessments
Provide analysis, reporting, and insights on security posture, controls effectiveness,
and security governance metrics
Support the definition and evolution of Group Security standards, models, architectures, baselines and guidelines, fostering their consistent adoption
across the organization
Degree in Cyber Security, Computer Science, Information Technology, Engineering, or equivalent practical experience
Experience in Security Governance, Information Security, Cyber Risk Management, Third-Party Security, or related areas
Knowledge of security frameworks, security controls, risk management methodologies, and governance processes
Strong analytical and problem-solving skills with the ability to translate regulatory and business requirements into actionable security initiatives
Experience working with cross-functional stakeholders in complex and regulated environments
Strong communication and presentation skills
Ability to manage multiple priorities and coordinate activities across different teams
Proficiency in English (written and spoken)
Nice to have:
Familiarity with regulatory frameworks and security standards (e.g. DORA, NIS2, EBA Guidelines, ISO *****, NIST)
Knowledge of Audit, Compliance, Data Protection, and Operational Risk processes
Professional certifications such as CISSP, CISM, CRISC, ISO ***** Lead Implementer/Auditor, or equivalent
Experience in Security Portfolio Management, Security Controls Monitoring, or Security Assurance activities
Cosa ti offriamo
#MakeInnovationHappen: Chance to make an impact in terms of transformation
#UnlockYourPotential: Join a young and stimulating environment
#ComeAsYouAre: Working within a global team
#UnlockYourPotential: Play a role of autonomy with high visibility and exposure
About UniCredit Group
#J-*****-Ljbffr
Job ID
UniCredit S.p.A
Competence Line
Digital
Security
MILANO, ROMA
Professional
Full-time
Contatto
******
******
We are seeking a Security Governance, Controls & Third-Party Security Specialist to support our Group Security function.
In this role, you will contribute to the
definition, implementation, and continuous improvement of the Group Security governance framework, ensuring alignment with regulatory requirements,
security standards, and business priorities.
You will play a key role in overseeing security controls, managing Third-Party Security activities, supporting
regulatory initiatives, and strengthening the overall security posture across the Group.
Define, maintain, and evolve Security policies, standards, guidelines, and governance frameworks across the Group
Coordinate and monitor Security controls, KPIs, and governance processes to ensure effectiveness and compliance
Support the management of Third-Party Security assessments, contractual security requirements, and security exception processes
Perform security posture assessments, maturity evaluations, and gap analyses against internal policies and external regulations
Collaborate with Risk, Compliance, Audit, Legal, Data Protection, Digital and business stakeholders to ensure alignment on security activities
Support regulatory inspections, audits, consultations, and requests from supervisory authorities and institutions
Monitor remediation activities related to audit findings, regulatory observations, and security assessments
Provide analysis, reporting, and insights on security posture, controls effectiveness,
and security governance metrics
Support the definition and evolution of Group Security standards, models, architectures, baselines and guidelines, fostering their consistent adoption
across the organization
Degree in Cyber Security, Computer Science, Information Technology, Engineering, or equivalent practical experience
Experience in Security Governance, Information Security, Cyber Risk Management, Third-Party Security, or related areas
Knowledge of security frameworks, security controls, risk management methodologies, and governance processes
Strong analytical and problem-solving skills with the ability to translate regulatory and business requirements into actionable security initiatives
Experience working with cross-functional stakeholders in complex and regulated environments
Strong communication and presentation skills
Ability to manage multiple priorities and coordinate activities across different teams
Proficiency in English (written and spoken)
Nice to have:
Familiarity with regulatory frameworks and security standards (e.g. DORA, NIS2, EBA Guidelines, ISO *****, NIST)
Knowledge of Audit, Compliance, Data Protection, and Operational Risk processes
Professional certifications such as CISSP, CISM, CRISC, ISO ***** Lead Implementer/Auditor, or equivalent
Experience in Security Portfolio Management, Security Controls Monitoring, or Security Assurance activities
Cosa ti offriamo
#MakeInnovationHappen: Chance to make an impact in terms of transformation
#UnlockYourPotential: Join a young and stimulating environment
#ComeAsYouAre: Working within a global team
#UnlockYourPotential: Play a role of autonomy with high visibility and exposure
About UniCredit Group
#J-*****-Ljbffr