Cyber Security Analyst Senior

CRIF; Bologna; In loco; EUR 45.000 - 55.000; Tempo pieno

Descrizione del lavoro

CRIF, an international fintech company headquartered in Bologna, seeks a Senior Cyber Security Analyst to join the Global Cybersecurity team at its Bologna headquarters. The role focuses on risk-based security guidance, cloud and enterprise security capabilities, and evolving security standards across the organization.

You will collaborate with Architecture, Cloud, Infrastructure, Engineering, and Business teams in an international setting, with growth opportunities and hands-on experience with

Competenze

• Proven hands-on cybersecurity experience in enterprise or regulated environments.
• Ability to engage technical stakeholders, review architectures, and provide practical security guidance.
• Experience in two or more areas from cloud security, security controls, red/purple team, application security, or Microsoft 365 security.

Mansioni

• Design, implement, and evolve security controls across cloud, identity, endpoint, collaboration, and infrastructure platforms.
• Review security architectures and provide risk-aligned recommendations.
• Drive adoption of modern security capabilities across cloud and enterprise environments.
• Act as trusted security advisor to internal stakeholders and partners.
• Perform security assessments, identify risks, and propose pragmatic mitigations.

Conoscenze

Cloud security

Security architecture review

Security guidance

Red Team / Purple Team

Application Security

Microsoft 365 security

Zero Trust

Least privilege

Security leadership

English proficiency

Strumenti

Microsoft Sentinel

Conditional Access

AWS security services

Cloud-native security controls

Descrizione del lavoro

We are an international fintech company headquartered in Bologna, delivering innovative financial solutions through globally distributed teams. We offer a dynamic, collaborative, and multicultural environment where technology, innovation, and security play a strategic role. If you're passionate about cybersecurity and want to make a real impact in a fast-paced organization, we'd love to meet you.

The Role

We are looking for an experienced Senior Cyber Security Analyst to join our Global Cybersecurity team at our Bologna Headquarters.

The Global Cybersecurity Team provides managed security services to all Group companies, including Software Security, Cloud & Infrastructure Security, Incident Management, Security Testing, and Security Consulting for technology initiatives. We support the company's cloud transformation and the adoption of AI-driven business services across all countries where CRIF operates.

In this role, you will provide practical, risk-based security guidance, help drive the adoption of modern security capabilities across cloud and enterprise environments, and contribute to the evolution of security standards and best practices. You will act as a trusted security advisor to internal stakeholders, partnering with Architecture, Cloud, Infrastructure, Engineering, and Business teams.

You will work in an international environment, with opportunities for rapid professional growth, dedicated training, and hands‑on experience with leading technologies.

Key Responsibilities

• Support the design, implementation, and evolution of security controls across cloud, identity, endpoint, collaboration, and infrastructure platforms.
• Review security architectures and provide security recommendations aligned with business and risk requirements.
• Support the adoption and effective use of security technologies and services across the organization.
• Monitor emerging threats, technologies, and security trends, translating them into actionable recommendations.
• Act as a trusted cybersecurity advisor throughout the design and implementation of technology initiatives and projects.
• Perform security assessments, identify risks, and recommend pragmatic mitigation strategies.

Required Skills & Experience

• Proven hands‑on experience in cybersecurity, ideally within enterprise, multinational, or highly regulated environments.
• Strong ability to engage with technical stakeholders, review architectures, and provide practical security guidance.
• Hands‑on experience in two or more of the following areas:
• Cloud security (Microsoft Azure and/or AWS)
• Implementation and maintenance of in‑depth cybersecurity defensive systems and controls
• Coordination of Red Team and Purple Team activities.
• Application Security
• Microsoft 365 security
• Hardening and secure configuration of typical datacenter technologies (servers, storage, database)
• Experience with AI agents and agentic AI technologies is a plus.
• Working knowledge of modern security principles, including Zero Trust, defense‑in‑depth, least privilege, and modern authentication.
• Experience with two or more of the following technologies:
• Microsoft Sentinel
• Conditional Access
• AWS security services
• Cloud‑native security controls
• Ability to understand business requirements and translate them into effective security solutions.
• Excellent communication and stakeholder management skills.
• Professional proficiency in English.

Nice to Have

• Experience with hybrid and on‑premises infrastructures.
• Experience working in cloud migration or digital transformation programs.
• Security certifications such as CISSP, CCSP, SC-100, AZ-500, AWS Security Specialty, or equivalent.
• Experience within financial services, fintech, or other regulated industries.

In CRIF we offer a safe and inclusive environment where colleagues are encouraged to think outside the box. CRIF is committed to creating a diverse, inclusive work environment and promoting equal opportunities throughout the employee life cycle. We aim to attract and retain the best people and embracing gender, age, culture, religion and disability diversity.

What we offer:

The type of contract: permanent.

The Annual Salary for this position starts from €50,000 gross per year.

The level of classification will be determined during the selection process based on the candidate’s profile and in accordance with the National Collective Labour Agreement (CCNL) for the Tertiary, Distribution and Services sector.

The final compensation package, including any variable components (such as MBO) or additional benefits, will depend on the assessment of the candidate’s profile against the role requirements.

Pursuant to Regulation (EU) 2016/679 (“GDPR”), candidates are hereby informed that their personal data will be processed exclusively for purposes related to the management of their application and the selection process. For further information on the processing of personal data and on the exercise of their privacy rights, candidates are invited to consult the full privacy notice available at the following Link, in the “Terms of Use” section.