Digital Risk Analyst

Contract type:
Permanent

Salary based on experience

Workplace: 20851 Lissone MB, Italia, smart working 2gg/settimana

For a
Sporting Goods Retailer based in Italy we are looking for a:

DIGITAL RISK ANALYST
The
Information Security vision aims to build trust and provide Security & Compliance assurance and confidence to customers.
Technology (Digital)

Italian team is fully aligned with the global corporate effort to improve cybersecurity at all levels:

acting locally as part of a global network, we are part of a
Shared Responsibility model crafted in the defined Group Information Security Policy.

Today our country's cybersecurity capabilities are primarily inside the
Network and Security team; the 2023 organization will evolve to reinforce these capabilities by having dedicated resources to Cybersecurity.

The Digital Risk Analysts
will report directly to the IT Country Leader.
As
Digital Risk Analyst - Local Security Responsible you will act at country scale

• Leading risk analysis interviews on local IT assets and solutions;
• Reporting on identified risks;
• Identify and define action plans to reduce security risks;
• Managing security projects (large or complex assessment, coordination of other people (analyst, PO, tech, etc), followup actions

plan, local deployments for corp security solutions)

You' ll play also the role of
Local Security Officer

• Implementing the Group Information Security Policy and associated specific policies in your country perimeter (taking part of the global Information Security governance led by our group CISO).
• Contributing to provide visibility on country cybersecurity status by collecting, monitoring, animating relevant KPI.
• Contributing to actively monitor the regulatory and security context, with particular focus on local regulations.

QUALITIES:

• Sporty
• Good at communicating with all stakeholders (peers review, clear and efficient communication, reporting).
• Well organized and planned.
• Passionate about technical innovations and continuous learning.

REQUIREMENTS:

Must have:

• Higher education in IT or business school.
• At least 12 years experience in a position focused on the analysis and management of Information System security risks.
• Familiar with IS risk frameworks (ex. ISO 2700X), IS risk analysis process, IS risk analysis tooling.
• Ability to deliver clear and detailed reporting on evaluated risks and associated security controls.
• Ability to define the actions plan to reduce the risks taking into account weighing cost and value in decision making.
• Fluent in English, both orally and in writing (it's mandatory in order to communicate and collaborate with international tech teams and

other countries' representatives)

-
Nice to have:

• Familiar with working in matrix environments
• Familiar with NIST Cybersecurity framework

LI-Hybrid

---