Cyber Risk & Information Security Governance Analyst

CRIF; Bologna; In loco; EUR 34.000 - 42.000; Tempo pieno

Descrizione del lavoro

CRIF is seeking a talented Information Security Analyst to join its Information Security Governance function at a global level, focusing on strengthening governance and managing technology-driven cyber risks with emphasis on security controls. The role reports to the Chief Information Security Officer and collaborates with IT Cybersecurity teams and business units.

The position involves audits, security assessments, and embedding security measures into core processes, while promoting a

Competenze

• 3+ years of professional experience in Information Security Governance or Cybersecurity.
• Experience in Security Advisory, Cybersecurity Project & Program Management, IT Control Evaluation or IT Governance is a plus.
• Hands-on risk management experience focusing on vulnerabilities, misconfigurations and security gaps.
• Understanding of vulnerability management processes (scanning, prioritization, remediation tracking).
• Strong knowledge of information security principles, frameworks and standards (GDPR, ISO, NIST, CIS, NIS).
• Experience authoring security policies, standards and risk posture measurement.
• Solid understanding of security domains: infrastructure, cloud, application, endpoint, security operations, DevSecOps, data security.
• Ability to relate Enterprise Architecture, processes and cybersecurity risks; strong communication and collaboration skills.

Mansioni

• Contribute to identification, analysis and mitigation of information security risks, focusing on vulnerabilities and misconfigurations.
• Assist in Vendor and Third-Party Cybersecurity Management through assessments and audits.
• Support development and revision of Global Technologies Information Security policies and metrics.
• Coordinate security requirements with Global Technologies functions.
• Work with Cybersecurity teams worldwide to align strategy with business needs.
• Provide input to embed security requirements into IT governance processes.
• Engage with business units to provide cybersecurity guidance on initiatives.
• Support customer relationships, audits and security questionnaires.
• Support Internal Audit activities, coordinating remediation actions.

Conoscenze

InfoSec governance

Cybersecurity

Vulnerability management

Regulatory standards (GDPR, NIST, ISO,

Strumenti

Vulnerability scanners

Descrizione del lavoro

CRIF is seeking a talented Information Security Analyst to join its Information Security Governance function at a global level, focusing on strengthening governance and managing technology-driven cyber risks with emphasis on security controls. The role reports to the Chief Information Security Officer and collaborates with IT Cybersecurity teams and business units.

The position involves audits, security assessments, and embedding security measures into core processes, while promoting a