Group Security Assurance_Security Governance, Controls & Third-Party Security Specialist
h3Candidati come Group Security Assurance_Security Governance, Controls Third-Party Security Specialist /h3pJob ID /p pUniCredit S.p.A /ppCompetence Line /ppDigital /ppSecurity /ppMILANO, ROMA /ppProfessional /ppFull-time /ppContatto /p p30.000 /pp50.000 /ppWe are seeking a Security Governance, Controls Third-Party Security Specialist to support our Group Security function. In this role, you will contribute to the /ppdefinition, implementation, and continuous improvement of the Group Security governance framework, ensuring alignment with regulatory requirements, /ppsecurity standards, and business priorities. You will play a key role in overseeing security controls, managing Third-Party Security activities, supporting /ppregulatory initiatives, and strengthening the overall security posture across the Group. /pulliDefine, maintain, and evolve Security policies, standards, guidelines, and governance frameworks across the Group /liliCoordinate and monitor Security controls, KPIs, and governance processes to ensure effectiveness and compliance /liliSupport the management of Third-Party Security assessments, contractual security requirements, and security exception processes /liliPerform security posture assessments, maturity evaluations, and gap analyses against internal policies and external regulations /liliCollaborate with Risk, Compliance, Audit, Legal, Data Protection, Digital and business stakeholders to ensure alignment on security activities /liliSupport regulatory inspections, audits, consultations, and requests from supervisory authorities and institutions /liliMonitor remediation activities related to audit findings, regulatory observations, and security assessments /liliProvide analysis, reporting, and insights on security posture, controls effectiveness,
and security governance metrics /liliSupport the definition and evolution of Group Security standards, models, architectures, baselines and guidelines, fostering their consistent adoption /liliacross the organization /liliDegree in Cyber Security, Computer Science, Information Technology, Engineering, or equivalent practical experience /liliExperience in Security Governance, Information Security, Cyber Risk Management, Third-Party Security, or related areas /liliKnowledge of security frameworks, security controls, risk management methodologies, and governance processes /liliStrong analytical and problem-solving skills with the ability to translate regulatory and business requirements into actionable security initiatives /liliExperience working with cross-functional stakeholders in complex and regulated environments /liliStrong communication and presentation skills /liliAbility to manage multiple priorities and coordinate activities across different teams /liliProficiency in English (written and spoken) /liliNice to have: /liliFamiliarity with regulatory frameworks and security standards (e.g. DORA, NIS2, EBA Guidelines, ISO 27001, NIST) /liliKnowledge of Audit, Compliance, Data Protection, and Operational Risk processes /liliProfessional certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor, or equivalent /liliExperience in Security Portfolio Management, Security Controls Monitoring, or Security Assurance activities /li /ulh3Cosa ti offriamo /h3p#MakeInnovationHappen: Chance to make an impact in terms of transformation /pp#UnlockYourPotential: Join a young and stimulating environment /pp#ComeAsYouAre: Working within a global team /pp#UnlockYourPotential: Play a role of autonomy with high visibility and exposure /ph3About UniCredit Group /h3 #J-18808-Ljbffr
and security governance metrics /liliSupport the definition and evolution of Group Security standards, models, architectures, baselines and guidelines, fostering their consistent adoption /liliacross the organization /liliDegree in Cyber Security, Computer Science, Information Technology, Engineering, or equivalent practical experience /liliExperience in Security Governance, Information Security, Cyber Risk Management, Third-Party Security, or related areas /liliKnowledge of security frameworks, security controls, risk management methodologies, and governance processes /liliStrong analytical and problem-solving skills with the ability to translate regulatory and business requirements into actionable security initiatives /liliExperience working with cross-functional stakeholders in complex and regulated environments /liliStrong communication and presentation skills /liliAbility to manage multiple priorities and coordinate activities across different teams /liliProficiency in English (written and spoken) /liliNice to have: /liliFamiliarity with regulatory frameworks and security standards (e.g. DORA, NIS2, EBA Guidelines, ISO 27001, NIST) /liliKnowledge of Audit, Compliance, Data Protection, and Operational Risk processes /liliProfessional certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor, or equivalent /liliExperience in Security Portfolio Management, Security Controls Monitoring, or Security Assurance activities /li /ulh3Cosa ti offriamo /h3p#MakeInnovationHappen: Chance to make an impact in terms of transformation /pp#UnlockYourPotential: Join a young and stimulating environment /pp#ComeAsYouAre: Working within a global team /pp#UnlockYourPotential: Play a role of autonomy with high visibility and exposure /ph3About UniCredit Group /h3 #J-18808-Ljbffr