IT Security Manager

We are a digital company born in 2008 and in just a few years we have become the number 1 comparison site in Italy. Thanks to technology, we have transformed the process of choosing insurance, financial products and household expenses into a simple and fast activity, allowing millions of people to save time and money every day.

We are a group of almost 1,000 young digital entrepreneurs, developers, marketers, designers and engineers. Born as a startup, we have maintained the same mentality over time: we are concrete, we look at results and invest in talent and meritocracy.

We have grown so much in recent years, to become one of the very few Italian unicorns, and we continue to grow. For this we are looking for the best talents, people who want to make a difference and who can join our team to contribute to our evolution.

We believe that the balance between private and professional life is fundamental. That’s why we introduced concrete initiatives to create a working environment that promotes both productivity and well-being individual: short week, unlimited remote working, up to 50% more holidays per year, longer paternity-leave, welfare and more.

We strive every day to create an inclusive working environment, based on respect, ethics and equal opportunities, to ensure the enhancement of the characteristics of each and foster the well-being of our people.

**Posizione**:
We are looking for an IT Security Manager who will be responsible for ensuring the security of IT resources and of the data in the branch, playing a key role in preserving integrity, confidentiality and availability of information. Will work closely with the IT Security Manager of Group and others responsible for implementing and maintaining effective policies and procedures.

Main Responsibilities:

- Development and Implementation of the IT Security Strategy:

- Contribute to the development of the online branch's cybersecurity strategy with the Group's directives
- Implement local cybersecurity policies, standards and procedures, ensuring consistency with Group policies
- Work with development teams to integrate security early on software life cycle
- Application Security Testing:

- Threat and Incident Management:

- Continuously monitor the cyber threat landscape and develop proactive strategies to address emerging threats
- Coordinate response to security incidents, ensuring timely investigation and impact mitigation
- Identity and Access Management:

- Implement and manage identity and access management solutions, ensuring that access to computing resources is appropriate and secure
- Regularly monitor and audit user privileges to prevent breaches of safety
- Risk Assessment:

- Conduct regular risk assessments to identify potential vulnerabilities and propose corrective measures
- Collaborate with affected departments to implement risk mitigation plans
- Training and Awareness:

- Develop and implement cybersecurity training programs for raise staff awareness of information security
- Monitor the effectiveness of training programs and make improvements accordingly to the identified needs
- Regulatory Compliance:

- Ensure compliance with relevant regulations and safety standards
- Collaborate with internal functions and external vendors to ensure security and safetyre gulatory compliance
- Collaboration with Internal and External Parties:

- Collaborate with internal departments, vendors and external partners to ensure security of information in all operational aspects
- Attend security meetings and conferences to stay up to date best practices in the sector.

**Requisiti**:
We would like for you to have:

- Bachelor's degree in Computer Science, Cyber Security or related field
- In-depth knowledge of software development technologies and best practices safety
- Ability to adapt to a dynamic environment and work collaboratively
- Cyber security certifications (e.g. CISM, CISSP) are preferred.

**Altre informazioni**:
We’ll make sure you always have:

- Autonomy and responsibility: you will be free to choose, try, fail and try again. We believe that participating is the first step to making a difference
- Career opportunities: you will be evaluated every six months and your results will guide your growth path
- Continuing education: we believe in talent and we like to cultivate it. You will have training and refresher courses available during which you can learn from industry experts
- Stimulating environment: we work in a dynamic and synergistic way, cross team. This will allow you to deal with talented professionals and always challenging tasks
- Flexible working mode:

- Smart working
- Working week short, Friday afternoon is off
- Over 50% of holidays compared to those already planned
- Various welfare initiatives (for parents, leisure, personal care)

LI-EC1