ppWe are looking for a highly talented individual to join the CRIF Information Security Governance function at global level. The candidate will support the organization in strengthening information security governance and in improving the management of btechnology-driven cyber risks /b, with a specific focus on security controls effectiveness. Collaborating with the Chief Information Security Officer, IT Cybersecurity Team and Managers, the Information Security Analyst will work closely with Global Technologies functions and company departments, contributing to bidentify, assess and mitigate Information Security risks associated with infrastructure, applications and services /b. /p pThis position is ideal for someone passionate about information security governance and operational risk management, with a strong interest in bpractical risk management linked to vulnerabilities, misconfigurations and security gaps /b, and who enjoys continuously learning and sharing knowledge. /p pBusiness Overview: /p pCRIF is a company specializing in credit bureau and business information, outsourcing and processing services, and credit solutions. Established in 1988 in Bologna (Italy), CRIF has an international presence, operating over four continents (Europe, America, Africa, and Asia). More than 10,500 financial institutions, 600 insurance companies, 82,000 business clients, and 1,000,000 consumers use CRIF services in 50 countries daily. /p pThe Information Security Governance function is part of Global Technologies, the CRIF IT division, with over 1500 professionals distributed in 15 countries, managing 29 datacenters and 12 development hubs, committed to delivering value to businesses, driving corporate Digital Transformation through the planning, development, and implementation of end-to-end solutions, adopting leading technologies and methodologies. /p pReporting to the Chief Information Security Officer and working closely with the Cybersecurity team, the Information Security Governance function helps shape a consistent and pragmatic approach to cybersecurity across the organization. It focuses on understanding and addressing technology-driven risks, ensuring they are properly managed and embedded into governance, processes and business initiatives. It also supports customer-facing activities, including audits and security assessments, acting as a trusted point of reference on information security matters. The role acts as a bridge between cybersecurity, IT and business, promoting a solid,



risk-aware culture and supporting the organization in making informed and secure decisions. /p h3Your Key Responsibilities: /h3 pReporting to the CRIF Information Security Manager you will be responsible for the following: /p ul liContribute to the identification, analysis and mitigation of information security risks, with a strong focus on technology-related risk drivers such as vulnerabilities, misconfigurations, patching gaps and exposure of IT assets, ensuring that remediation actions are effectively tracked and implemented. /li liAssist in Vendor and Third-Party Cybersecurity Management through assessments, audits, and periodic reviews, coordinating security assessments and remediation activities to closure, ensuring compliance with information security standards and contractual requirements. /li liSupport the development, implementation, and revision of Global Technologies Information Security policies, controls, and metrics to ensure compliance with CRIF Corporate Policies. /li liCoordinate with Global Technologies functions to ensure security requirements and controls align with technical needs, constraints, and evolving technology landscape. /li liWork closely with Cybersecurity teams worldwide to build and maintain a unified cybersecurity strategy aligned with global business needs and regulatory requirements. /li liProvide expert input to Global Technologies IT Governance functions to embed security requirements into core IT processes. /li liMaintain proactive engagement with business and staff functions to provide cybersecurity guidance in key initiatives (e.g. Awareness programs, MA integrations, new business initiatives). /li liSupport customer relationships, facilitating audits and responding to client cybersecurity requests and questionnaires. /li liSupport Internal Audit activities, coordinating cybersecurity remediation actions and monitoring control effectiveness. /li /ul h3Your Skills and Experience: /h3 p3+ years of professional experience in Information Security Governance or Cybersecurity. /p pExperience in roles such as Security Advisory, Cybersecurity Project Program Management,



IT Control Evaluation or IT Governance is a plus /p pHands-on experience in managing Information Security risk from a technical perspective, with the ability to understand and evaluate risks related to vulnerabilities, system exposures, misconfigurations and weaknesses in security controls (rather than purely theoretical or compliance-driven risk assessments). /p pBasic understanding of vulnerability management processes (e.g. scanning, prioritization, remediation tracking) and their role in defining the organization's cyber risk posture. /p pStrong knowledge of information security principles, frameworks and best practices, and the ability to apply those principles in clear and articulate way; experience in understanding regulatory and industry standards such as DORA, ISO standards, CIS, NIST framework, NIS directive, GDPR , etc /p pExperience in authoring security policies, standards, and supporting the measurement of cyber risk posture. /p pSolid understanding of Information Security domains including Infrastructure Network Security, Cloud Security, Application Security, Endpoint Security, Security Operations and Incident Response, DevSecOps, and Data Security. /p pAbility to understand relationships between Enterprise Architecture, business processes, and cybersecurity risks. /p pStrong communication and collaboration skills, with the ability to explain technical risks in a clear and structured way. /p pThe candidate must be a self-starter comfortable with ambiguity, with strong attention to detail, ability to work in a fast-paced, high-energy, and ever-changing environment. /p pWe offer a safe and inclusive environment where colleagues are encouraged to think outside the box. CRIF is committed to creating a diverse, inclusive work environment and promoting equal opportunities throughout the employee life cycle. We aim to attract and retain the best people and embracing gender, age, culture, religion and disability diversity. /p h3What we offer: /h3 pType of contract: permanent. /p pThe Annual Salary for this position starts from €38,000 gross per year. /p pThe level of classification will be determined during the selection process based on the candidate’s profile and in accordance with the National Collective Labour Agreement (CCNL) for the Tertiary, Distribution and Services sector. /p pThe final compensation package, including any variable components (such as MBO) or additional benefits, will depend on the assessment of the candidate’s profile against the role requirements. /p /p #J-18808-Ljbffr

📌 Information Security Governance Analyst (Bologna)
🏢 Crif
📍 Bologna