pWe are looking for a highly talented individual to join the CRIF Information Security Governance function at global level. The candidate will support the organization in strengthening information security governance and in improving the management of btechnology-driven cyber risks /b, with a specific focus on security controls effectiveness. Collaborating with the Chief Information Security Officer, IT Cybersecurity Team and Managers, the Information Security Analyst will work closely with Global Technologies functions and company departments, contributing to bidentify, assess and mitigate Information Security risks associated with infrastructure, applications and services /b. /p pThis position is ideal for someone passionate about information security governance and operational risk management, with a strong interest in bpractical risk management linked to vulnerabilities, misconfigurations and security gaps /b, and who enjoys continuously learning and sharing knowledge. /p pBusiness Overview: /p pCRIF is a company specializing in credit bureau and business information, outsourcing and processing services, and credit solutions. Established in 1988 in Bologna (Italy), CRIF has an international presence, operating over four continents (Europe, America, Africa, and Asia). More than 10,500 financial institutions, 600 insurance companies, 82,000 business clients, and 1,000,000 consumers use CRIF services in 50 countries daily. /p pThe Information Security Governance function is part of Global Technologies, the CRIF IT division, with over 1500 professionals distributed in 15 countries, managing 29 datacenters and 12 development hubs, committed to delivering value to businesses, driving corporate Digital Transformation through the planning, development, and implementation of end-to-end solutions,



adopting leading technologies and methodologies. /p pReporting to the Chief Information Security Officer and working closely with the Cybersecurity team, the Information Security Governance function helps shape a consistent and pragmatic approach to cybersecurity across the organization. It focuses on understanding and addressing technology-driven risks, ensuring they are properly managed and embedded into governance, processes and business initiatives. It also supports customer-facing activities, including audits and security assessments, acting as a trusted point of reference on information security matters. The role acts as a bridge between cybersecurity, IT and business, promoting a solid, risk-aware culture and supporting the organization in making informed and secure decisions. /p h3Your

Key Responsibilities
/h3 pReporting to the CRIF Information Security Manager you will be responsible for the following: /p ul liContribute to the identification, analysis and mitigation of information security risks, with a strong focus on technology-related risk drivers such as vulnerabilities, misconfigurations, patching gaps and exposure of IT assets, ensuring that remediation actions are effectively tracked and implemented. /li liAssist in Vendor and Third-Party Cybersecurity Management through assessments, audits, and periodic reviews, coordinating security assessments and remediation activities to closure,



ensuring compliance with information security standards and contractual requirements. /li liSupport the development, implementation, and revision of Global Technologies Information Security policies, controls, and metrics to ensure compliance with CRIF Corporate Policies. /li liCoordinate with Global Technologies functions to ensure security requirements and controls align with technical needs, constraints, and evolving technology landscape. /li liWork closely with Cybersecurity teams worldwide to build and maintain a unified cybersecurity strategy aligned with global business needs and regulatory requirements. /li liProvide expert input to Global Technologies IT Governance functions to embed security requirements into core IT processes. /li liMaintain proactive engagement with business and staff functions to provide cybersecurity guidance in key initiatives (e.g. Awareness programs, MA integrations, new business initiatives). /li liSupport customer relationships, facilitating audits and responding to client cybersecurity requests and questionnaires. /li liSupport Internal Audit activities, coordinating cybersecurity remediation actions and monitoring control effectiveness. /li /ul h3Your Skills and

Experience:
/h3 p3+ years of professional experience in Information Security Governance or Cybersecurity. /p pExperience in roles such as Security Advisory, Cybersecurity Project Program Management, IT Control Evaluation or IT Governance is a plus /p pHands-on experience in managing Information Security risk from a technical perspective, with the ability to understand and evaluate risks related to vulnerabilities, system exposures, misconfigurations and weaknesses in security controls (rather than purely theoretical or comp

📌 Information Security Governance Analyst (Italia)
🏢 Crif
📍 Italia