h3Apply as Group Security Assurance_Security Governance, Controls Third-Party Security Specialist /h3h3General Information /h3pJob ID /p pCompany /ppUniCredit S.p.A /ppCompetence Line /ppDigital /ppCountry /ppItaly /ppCity /ppMILANO, ROMA /ppJob Type /ppProfessional /ppFunctional area /ppSecurity /ppWorking time model /ppFull-time /ppContact /p pBase Salary min (gross) /pp30.000 /ppBase Salary max (gross) /pp50.000 /ppWe are seeking a Security Governance, Controls Third-Party Security Specialist to support our Group Security function. In this role, you will contribute to the /ppdefinition, implementation, and continuous improvement of the Group Security governance framework, ensuring alignment with regulatory requirements, /ppsecurity standards, and business priorities. You will play a key role in overseeing security controls, managing Third-Party Security activities, supporting /ppregulatory initiatives, and strengthening the overall security posture across the Group. /ph3What you'll be doing /h3ulliDefine, maintain, and evolve Security policies, standards, guidelines, and governance frameworks across the Group /liliCoordinate and monitor Security controls, KPIs, and governance processes to ensure effectiveness and compliance /liliSupport the management of Third-Party Security assessments, contractual security requirements, and security exception processes /liliPerform security posture assessments, maturity evaluations, and gap analyses against internal policies and external regulations /liliCollaborate with Risk, Compliance, Audit, Legal, Data Protection, Digital and business stakeholders to ensure alignment on security activities /liliSupport regulatory inspections, audits, consultations, and requests from supervisory authorities and institutions /liliMonitor remediation activities related to audit findings,



regulatory observations, and security assessments /liliProvide analysis, reporting, and insights on security posture, controls effectiveness, and security governance metrics /liliSupport the definition and evolution of Group Security standards, models, architectures, baselines and guidelines, fostering their consistent adoption /liliacross the organization /li /ulh3What you'll need to succeed /h3ulliDegree in Cyber Security, Computer Science, Information Technology, Engineering, or equivalent practical experience /liliExperience in Security Governance, Information Security, Cyber Risk Management, Third-Party Security, or related areas /liliKnowledge of security frameworks, security controls, risk management methodologies, and governance processes /liliStrong analytical and problem-solving skills with the ability to translate regulatory and business requirements into actionable security initiatives /liliExperience working with cross-functional stakeholders in complex and regulated environments /liliStrong communication and presentation skills /liliAbility to manage multiple priorities and coordinate activities across different teams /liliProficiency in English (written and spoken) /liliNice to have: /liliFamiliarity with regulatory frameworks and security standards (e.g. DORA, NIS2, EBA Guidelines, ISO 27001, NIST) /liliKnowledge of Audit, Compliance, Data Protection,



and Operational Risk processes /liliProfessional certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor, or equivalent /liliExperience in Security Portfolio Management, Security Controls Monitoring, or Security Assurance activities /li /ulh3What you'll get in return /h3p#MakeInnovationHappen: Chance to make an impact in terms of transformation /pp#UnlockYourPotential: Join a young and stimulating environment /pp#ComeAsYouAre: Working within a global team /pp#UnlockYourPotential: Play a role of autonomy with high visibility and exposure /ph3About UniCredit Group /h3pUniCredit is a pan-European leading commercial bank providing best-in-class solutions and services across Italy, Germany, Austria, and Central and Eastern Europe. Our Vision is to be the Bank for Europe's Future. Our Purpose is to Empower Communities to Progress, delivering the best-in-class products and services for all stakeholders, unleashing the potential of our people and our clients across Europe. We serve over 20 million clients, supported by three Group product factories — Corporate, Individual and Payment Solutions — that ensure best-in-class expertise and scalable solutions across all markets. Our integrated model combines local proximity, deep client understanding and Group-wide capabilities, enabling seamless service and outstanding client experience. Digitalisation, operational excellence and a strong commitment to ESG principles underpin our journey, helping us deliver sustainable long-term value for clients, communities, employees and shareholders. Our shared Culture unites our people across all countries, empowering teamwork, driven execution and ambition through Ownership, Integrity and Caring. /p #J-18808-Ljbffr

📌 Group Security Assurance_Security Governance, Controls & Third-Party Security Specialist (Italia)
🏢 HypoVereinsbank
📍 Italia