Cyber Security Governance
Salva questo lavoro e mantieni la tua ricerca organizzata
Crea un account gratuito per salvare lavori, creare avvisi e tornare a questa inserzione dalla tua dashboard.
Continuando accetti i nostri Termini & Informativa sulla privacy.
In this role you drive the secure software development lifecycle across the organization, shaping security practices, controls, and metrics. You partner with engineering and product teams to embed security by design and reduce risk, while leading initiatives that mature the company’s application security posture. You will engage with AI risk considerations and a fast-paced, cross-functional environment to deliver secure, high-quality software. This position offers impact in a growth-focused, innovation-driven company with hybrid work in Milan or Rome.
Retribuzione / Benefits- 4-day week
- Wellbeing Digital Wallet
- personal wellbeing budget (travel, medical, parental support, sports)
- hybrid work model
- tailored learning paths
- global/international exposure
- Drive continuous improvement of the application security maturity across teams and products
- Define, measure, and track security KPIs for vulnerability management and risk visibility
- Lead application security initiatives and promote security-by-design from early development stages
- Define and evolve security controls aligned with standards, regulations, and frameworks
- Collaborate with Product Owners and development teams to align security with business priorities
- Contribute to secure development lifecycle practices and guide engineering teams in security best practices
- Read/review code and support SDLC with hands-on security expertise
- Knowledge of application security frameworks: SAMM, ASVS, NIST CSF
- Understanding ISO 27000, NIS2, DORA, ACN, PCI-DSS and their impact on app security
- Awareness of AI risk frameworks: NIST AI RMF, EU AI Act, ISO/IEC 23894, OWASP Top 10 for LLMs
- Understanding AI-related risks and current AI landscape
- Experience as software developer or security engineer; ability to read/review code (plus)
- Familiarity with SAST, DAST, pen testing, dependency/vulnerability scanning (plus)
- Strong knowledge of secure design principles: encryption, authentication/authorization, input filtering
- Advanced English (C1)
- collaboration
- curiosity/continuous learning
- proactive mindset
- application security frameworks (SAMM, ASVS, NIST CSF)
- AI risk and security concepts (NIST AI RMF, EU AI Act)
- threat modeling
-
Security & Cyber Governance Senior
3 giorni fa
pavia, lombardia, Italia Intesa Sanpaolo Group Tempo pienoSeleziona la frequenza (in giorni) di ricezione di un avviso: Crea avviso Entrerai nell'ufficio Group Security Planning & Models Monitoring, contribuendo al governo e monitoraggio dell'Area Chief Security Officer, con visione integrata sugli ambiti di Cybersecurity, Antifraud and Business Continuity Management e di Corporate and Physical Security. Ti...
-
Senior Security
3 giorni fa
pavia, lombardia, Italia Intesa Sanpaolo Group Tempo pienoIntesa Sanpaolo S.p.A. cerca un professionista per l’Area Security Governance, entrando nel gruppo Group Security Planning & Models Monitoring.Il ruolo presiede al coordinamento centrale delle iniziative trasversali e al supporto del Chief Security Officer su security cyber, antifraud e continuity. Si richiede esperienza pluriennale, gestione progetti...
-
Cyber Security Lead — Ownership, Governance
6 giorni fa
pavia, lombardia, Italia Wyser srl Tempo pienoWyser srl cerca un Cyber Security Manager/Lead per Milano. Il candidato costruirà un presidio di sicurezza con governance, policy e roadmap, coordinando fornitori e lavorando a stretto contatto con l’IT, per aumentare l’efficacia della sicurezza e l’autonomia decisionale.Il ruolo prevede anche attività operative: vulnerability management, hardening,...
-
Cyber Security Expert
18 ore fa
pavia, lombardia, Italia Reply Tempo pienoOverview In questa posizione, contribuirai a progettare, sviluppare e portare in produzione soluzioni di Cyber Security per clienti leader di mercato. Lavorerai a stretto contatto con team multipla-disciplinari per ridurre la superficie di attacco e proteggere le piattaforme digitali, includendo l’adozione sicura di AI. Userai strumenti di AI Engineering...
-
pavia, lombardia, Italia Deloitte Tempo pienoOverview In this role you join Deloitte’s Cyber Governance & Compliance team in Milan or Rome, operating in a hybrid mode. You’ll help clients strengthen cybersecurity governance, design effective security solutions, and manage risk within broader projects. You will collaborate with cross‑functional teams and stakeholders to translate security strategy...
-
Cyber Security Incident Responder
13 ore fa
Pavia, Lombardia, Italia Engineering ITS Tempo pienoOverview In questo ruolo ti occuperai di rispondere a incidenti di sicurezza per i clienti, operando in un team di Cyber Defence e contribuendo a mitigare e ripristinare le infrastrutture colpite. Ciò include analisi forense, analisi di log e gestione delle contromisure in tempi di reperibilità 24/7. Avrai modo di guidare attività di containment,...
-
Cyber Security Defence Center Manager
18 ore fa
pavia, lombardia, Italia Pirelli Tempo pienoOverview In this role you will lead the Cyber Security Defence Center to strengthen cyber resilience, reduce business risk, and protect critical information. You will drive security monitoring, threat detection, and incident response, coordinating with internal and external stakeholders. You will ensure compliance with NIS2 and continuously improve detection...
-
pavia, lombardia, Italia Sisal Tempo pienoOverview In this role you lead Flutter SEA’s information security governance and compliance efforts, coordinating ISO 27001, NIS2, and WLA-related activities across legal entities and brands. You support audits, certifications and regulatory inspections while driving policy governance and security awareness. You’ll work closely with cross-border teams to...
-
Security Governance, Risk
18 ore fa
pavia, lombardia, Italia Avanade Tempo pienoOverview In Avanade Milano, in the Practice Security, you support high-visibility projects to transform clients' Security Management Systems. You work closely with HR, IT, Security and Application Owners to design and implement risk-based, security-by-design solutions. You manage security programs, ensuring on-time delivery and creating client value...
-
Information Security Governance
2 giorni fa
Pavia, Lombardia, Italia Webuild Tempo pienoOverview In questa funzione, verrai responsabile di garantire un framework di sicurezza solido e conforme agli standard ISO/IEC 27001 e alle normative (NIS2, GDPR). Lavorerai all’interno del dipartimento Global Security and Cyber Defence a Milano per integrare la sicurezza nei processi di business e nella catena di fornitura. Gestirai policy, standard e...
