Questa posizione è in Saipem Il processo di selezione sarà interamente gestito Saipem.
-- Join Saipem and engineer a sustainable future.
We are a global leader in engineering and construction for the energy and infrastructure sectors, delivering complex onshore and offshore projects worldwide.
Driven by technological innovation as "One Company", our 30,000 people from over 130 nationalities in more than 50 countries work every day to enable the energy transition toward Net Zero.
At Saipem, we embrace diversity as a driver of innovation and inclusion, while prioritizing people's safety and environmental sustainability, even in the most challenging conditions.
Purpose of the position: As Cybersecurity Third-Party Risk Management Specialist you will be part of the Cyber Security Governance Department.
How can you support us?
Here below your responsibilities: Perform cybersecurity risk assessments of third-party engagements, evaluating suppliers' cybersecurity posture through the review of questionnaires, security documentation, governance arrangements, certifications and supporting evidence.
Assess cybersecurity risks, gaps, non-compliance, exception requests and compensating controls, driving remediation activities and risk treatment plans with suppliers and internal stakeholders.
Contribute to the maintenance and continuous improvement of cybersecurity third-party risk management processes, methodologies, control frameworks and supplier monitoring activities.
Prepare risk reporting,



dashboards and management presentations to provide visibility of third-party cyber risk exposure, key risk trends and remediation status.
Support audits, compliance initiatives and regulatory programmes relating to supply-chain security and third-party cybersecurity risk management, providing subject matter expertise to internal and external stakeholders.
What are we looking for?
Education: Bachelor's or Master's degree in Cybersecurity, Information Security, Computer Science, Engineering, Risk Management or related disciplines.
Experience: 5+ years of experience in Cybersecurity, Information Security, ICT Risk Management or Third-Party Risk Management.
Languages: Italian: native or at least C1 proficiency.
English: at least B2 level (written and spoken).
Technical/IT Skills: Information Security any subjective or discriminatory factors, including but not limited to gender or other personal characteristics.
Regulatory Compliance The decision: is made in compliance with the principle of equal pay for the same work or work of equal value; complies with the pay transparency requirements set out in EU Directive ******** and the relevant national implementing legislation.
Additional Information We support your development!
Do you feel you might not fit this role perfectly?
If you think you can contribute to our business development in the future, don't hesitate to apply anyway through our spontaneous application form!
PRIVACY POLICY All interested candidates (L. ******) are invited to consult the privacy policy (art 13, 14, D.Lgs ****** and art 13 GDPR ******).
-- [#J-ENTERPRISE]

📌 It System Architect - Cybersecurity Third-Party Risk Management Specialist (Milano)
🏢 Saipem
📍 Milano