Allgemeine Informationen

Job Id

114532

Unternehmen

UniCredit S.p.A

Competence Line

Digital

Funktionsbereich

Security

Standort

MILANO, ROMA

Land

Italien

Kontakt

[email protected]

Jobniveau

Professionals

Arbeitszeitmodell

Vollzeit

Mindestgehalt (brutto)

30.000

Gehalt max. (brutto)

50.000

We are seeking a Security Governance, Controls & Third-Party Security Specialist to support our Group Security function. In this role, you will contribute to the

definition, implementation, and continuous improvement of the Group Security governance framework, ensuring alignment with regulatory requirements,

security standards, and business priorities. You will play a key role in overseeing security controls, managing Third-Party Security activities, supporting

regulatory initiatives, and strengthening the overall security posture across the Group.

What you'll be doing

- Define, maintain, and evolve Security policies, standards, guidelines, and governance frameworks across the Group
- Coordinate and monitor Security controls, KPIs, and governance processes to ensure effectiveness and compliance
- Support the management of Third-Party Security assessments, contractual security requirements, and security exception processes
- Perform security posture assessments, maturity evaluations, and gap analyses against internal policies and external regulations
- Collaborate with Risk, Compliance, Audit, Legal, Data Protection, Digital and business stakeholders to ensure alignment on security activities
- Support regulatory inspections, audits, consultations, and requests from supervisory authorities and institutions
- Monitor remediation activities related to audit findings, regulatory observations, and security assessments
- Provide analysis, reporting, and insights on security posture, controls effectiveness,



and security governance metrics
- Support the definition and evolution of Group Security standards, models, architectures, baselines and guidelines, fostering their consistent adoption
- across the organization

What you'll need to succeed

- Degree in Cyber Security, Computer Science, Information Technology, Engineering, or equivalent practical experience
- Experience in Security Governance, Information Security, Cyber Risk Management, Third-Party Security, or related areas
- Knowledge of security frameworks, security controls, risk management methodologies, and governance processes
- Strong analytical and problem-solving skills with the ability to translate regulatory and business requirements into actionable security initiatives
- Experience working with cross-functional stakeholders in complex and regulated environments
- Strong communication and presentation skills
- Ability to manage multiple priorities and coordinate activities across different teams
- Proficiency in English (written and spoken)
- Nice to have:
- Familiarity with regulatory frameworks and security standards (e.g. DORA, NIS2, EBA Guidelines, ISO 27001, NIST)
- Knowledge of Audit, Compliance, Data Protection, and Operational Risk processes
- Professional certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor, or equivalent
- Experience in Security Portfolio Management, Security Controls Monitoring, or Security Assurance activities

What you'll get in return

#MakeInnovationHappen:



Chance to make an impact in terms of transformation

#UnlockYourPotential: Join a young and stimulating environment

#ComeAsYouAre: Working within a global team

#UnlockYourPotential: Play a role of autonomy with high visibility and exposure

#BalanceLifeAndCareer: Flexible working hours & working hybrid

About UniCredit Group

Die UniCredit ist eine führende, paneuropäische Geschäftsbank, die erstklassige Lösungen und Services in Italien, Deutschland, Österreich, Zentral- und Osteuropa bietet. Unsere Vision ist es, die Bank für Europas Zukunft zu sein. Unser Anspruch lautet: Empower Communities to Progress. Er beinhaltet, allen Stakeholdern erstklassige Produkte und Services zu bieten und dadurch das Potenzial unserer Kund:innen und Mitarbeitenden in ganz Europa zur Entfaltung zu bringen. Wir betreuen mehr als 20 Millionen Kund:innen, unterstützt von drei gruppenweiten Produktbereichen - Corporate, Individual und Payment Solutions -, mit denen wir in all unsere Märkten eine erstklassige Expertise und skalierbare Lösungen bereitstellen können. Unser integriertes Geschäftsmodell verbindet lokale Nähe und ein tiefes Verständnis für unsere Kund:innen mit den Stärken einer internationalen Gruppe und schafft dadurch nahtlos ineinandergreifende Services und ein exzellentes Kundenerlebnis. Digitalisierung, operative Exzellenz und ein starkes Bekenntnis zu den ESG-Grundsätzen bilden das Fundament unseres Handelns und ermöglichen es uns, nachhaltig Mehrwert für Kund:innen, Gemeinschaften, Mitarbeitende und Aktionär:innen zu schaffen. Unsere gemeinsame Kultur verbindet unsere Mitarbeitenden über alle Länder hinweg und stärkt Zusammenarbeit, konsequente Umsetzung und Ambition - getragen von unseren Werten Integrity, Ownership und Caring.

📌 Group Security Assurance_Security Governance, Controls & Third-Party Security Specialist (Roma)
🏢 UniCredit
📍 Roma