OverviewIn this role you drive the secure software development lifecycle across the organization, shaping security practices, controls, and metrics. You partner with engineering and product teams to embed security by design and reduce risk, while leading initiatives that mature the company's application security posture. You will engage with AI risk considerations and a fast-paced, cross-functional environment to deliver secure, high-quality software. This position offers impact in a growth-focused, innovation-driven company with hybrid work in Milan or Rome.Retribuzione / Benefits4-day weekWellbeing Digital Walletpersonal wellbeing budget (travel, medical, parental support, sports)hybrid work modeltailored learning pathsglobal/international exposureResponsabilitàDrive continuous improvement of the application security maturity across teams and productsDefine, measure, and track security KPIs for vulnerability management and risk visibilityLead application security initiatives and promote security-by-design from early development stagesDefine and evolve security controls aligned with standards, regulations,



and frameworksCollaborate with Product Owners and development teams to align security with business prioritiesContribute to secure development lifecycle practices and guide engineering teams in security best practicesRead/review code and support SDLC with hands-on security expertiseRequisiti fondamentaliKnowledge of application security frameworks: SAMM, ASVS, NIST CSFUnderstanding ISO 27000, NIS2, DORA, ACN, PCI-DSS and their impact on app securityAwareness of AI risk frameworks: NIST AI RMF, EU AI Act, ISO/IEC 23894, OWASP Top 10 for LLMsUnderstanding AI-related risks and current AI landscapeExperience as software developer or security engineer; ability to read/review code (plus)Familiarity with SAST, DAST, pen testing, dependency/vulnerability scanning (plus)Strong knowledge of secure design principles: encryption, authentication/authorization, input filteringAdvanced English (C1)collaborationcuriosity/continuous learningproactive mindsetapplication security frameworks (SAMM, ASVS, NIST CSF)AI risk and security concepts (NIST AI RMF, EU AI Act)threat modeling

📌 Cyber Security Governance (Monza)
🏢 Teamsystem
📍 Monza