h3Candidati come Group Security Assurance_Security Governance, Controls Third-Party Security Specialist /h3pJob ID /p pUniCredit S.p.A /ppCompetence Line /ppDigital /ppSecurity /ppMILANO, ROMA /ppProfessional /ppFull-time /ppContatto /p p****** /pp****** /ppWe are seeking a Security Governance, Controls Third-Party Security Specialist to support our Group Security function.
In this role, you will contribute to the /ppdefinition, implementation, and continuous improvement of the Group Security governance framework, ensuring alignment with regulatory requirements, /ppsecurity standards, and business priorities.
You will play a key role in overseeing security controls, managing Third-Party Security activities, supporting /ppregulatory initiatives, and strengthening the overall security posture across the Group.
/pulliDefine, maintain, and evolve Security policies, standards, guidelines, and governance frameworks across the Group /liliCoordinate and monitor Security controls, KPIs, and governance processes to ensure effectiveness and compliance /liliSupport the management of Third-Party Security assessments, contractual security requirements, and security exception processes /liliPerform security posture assessments, maturity evaluations, and gap analyses against internal policies and external regulations /liliCollaborate with Risk, Compliance, Audit, Legal, Data Protection, Digital and business stakeholders to ensure alignment on security activities /liliSupport regulatory inspections, audits, consultations, and requests from supervisory authorities and institutions /liliMonitor remediation activities related to audit findings, regulatory observations, and security assessments /liliProvide analysis, reporting, and insights on security posture, controls effectiveness,



and security governance metrics /liliSupport the definition and evolution of Group Security standards, models, architectures, baselines and guidelines, fostering their consistent adoption /liliacross the organization /liliDegree in Cyber Security, Computer Science, Information Technology, Engineering, or equivalent practical experience /liliExperience in Security Governance, Information Security, Cyber Risk Management, Third-Party Security, or related areas /liliKnowledge of security frameworks, security controls, risk management methodologies, and governance processes /liliStrong analytical and problem-solving skills with the ability to translate regulatory and business requirements into actionable security initiatives /liliExperience working with cross-functional stakeholders in complex and regulated environments /liliStrong communication and presentation skills /liliAbility to manage multiple priorities and coordinate activities across different teams /liliProficiency in English (written and spoken) /liliNice to have: /liliFamiliarity with regulatory frameworks and security standards (e.g. DORA, NIS2, EBA Guidelines, ISO *****, NIST) /liliKnowledge of Audit, Compliance, Data Protection, and Operational Risk processes /liliProfessional certifications such as CISSP, CISM, CRISC, ISO ***** Lead Implementer/Auditor, or equivalent /liliExperience in Security Portfolio Management, Security Controls Monitoring, or Security Assurance activities /li /ulh3Cosa ti offriamo /h3p#MakeInnovationHappen: Chance to make an impact in terms of transformation /pp#UnlockYourPotential: Join a young and stimulating environment /pp#ComeAsYouAre: Working within a global team /pp#UnlockYourPotential: Play a role of autonomy with high visibility and exposure /ph3About UniCredit Group /h3 #J-*****-Ljbffr

📌 Group Security Assurance_Security Governance, Controls & Third-Party Security Specialist (Lazio)
🏢 HypoVereinsbank
📍 Lazio