Cyber Security Analyst Senior

Crif; Lazio; In loco; EUR 45.000 - 55.000; Tempo pieno

Descrizione del lavoro

CRIF, a global fintech company headquartered in Bologna, is seeking a Senior Cyber Security Analyst to join its Global Cybersecurity team and help secure cloud, identity, and enterprise environments.

You will advise internal stakeholders, drive modern security capabilities, and work with Architecture, Cloud, Infrastructure, Engineering and Business teams in an international setting.

Competenze

• Proven hands-on cybersecurity experience in enterprise, multinational, or regulated environments.
• Ability to engage with technical stakeholders, review architectures, and provide practical guidance.
• Experience in two or more areas such as cloud security, application security, or security operations.

Mansioni

• Design, implement, and evolve security controls across cloud, identity, endpoint, collaboration, and infrastructure.
• Review security architectures and provide risk-aligned recommendations.
• Support adoption of security technologies across the organization.
• Monitor threats and translate them into actionable recommendations.
• Act as trusted security advisor to Architecture, Cloud, Infrastructure, Engineering and Business teams.
• Perform security assessments, identify risks, and propose pragmatic mitigations.

Conoscenze

Cloud security

Application Security

Zero Trust

Microsoft Defender

Strumenti

Microsoft Entra ID

AWS security services

Cloud security controls

Descrizione del lavoro

Senior Cyber Security Analyst

About CRIF

We are an international fintech company headquartered in Bologna, delivering innovative financial solutions through globally distributed teams. We offer a dynamic, collaborative, and multicultural environment where technology, innovation, and security play a strategic role. If you're passionate about cybersecurity and want to make a real impact in a fast‑paced organization, we'd love to meet you.

The Role

We are looking for an experienced Senior Cyber Security Analyst to join our Global Cybersecurity team at our Bologna Headquarters.

The Global Cybersecurity Team provides managed security services to all Group companies, including Software Security, Cloud Infrastructure Security, Incident Management, Security Testing, and Security Consulting for technology initiatives. We support the company's cloud transformation and the adoption of AI-driven business services across all countries where CRIF operates.

In this role, you will provide practical, risk‑based security guidance, help drive the adoption of modern security capabilities across cloud and enterprise environments, and contribute to the evolution of security standards and best practices. You will act as a trusted security advisor to internal stakeholders, partnering with Architecture, Cloud, Infrastructure, Engineering, and Business teams.

You will work in an international environment, with opportunities for rapid professional growth, dedicated training, and hands‑on experience with leading technologies.

Key Responsibilities

• Support the design, implementation, and evolution of security controls across cloud, identity, endpoint, collaboration, and infrastructure platforms.
• Review security architectures and provide security recommendations aligned with business and risk requirements.
• Support the adoption and effective use of security technologies and services across the organization.
• Monitor emerging threats, technologies, and security trends, translating them into actionable recommendations.
• Act as a trusted cybersecurity advisor throughout the design and implementation of technology initiatives and projects.
• Perform security assessments, identify risks, and recommend pragmatic mitigation strategies.

Required Skills Experience

• Proven hands‑on experience in cybersecurity, ideally within enterprise, multinational, or highly regulated environments.
• Strong ability to engage with technical stakeholders, review architectures, and provide practical security guidance.
• Hands‑on experience strongin two or more of the following areas:
  • Cloud security (Microsoft Azure and/or AWS)
  • Implementation and maintenance of in-depth cybersecurity defensive systems and controls
  • Coordination of Red Team and Purple Team activities.
  • Application Security
  • Microsoft 365 security
  • Hardening and secure configuration of typical datacenter technologies (servers, storage, database)
  • Experience with AI agents and agentic AI technologies is a plus.
• Working knowledge of modern security principles, including Zero Trust, defense‑in‑depth, least privilege, and modern authentication.
• Experience with strongtwo or more of the following technologies:
  • Microsoft Entra ID
  • Microsoft Defender suite
  • Microsoft Intune
  • Microsoft Sentinel
  • Conditional Access
  • AWS security services
  • Cloud‑native security controls
• Ability to understand business requirements and translate them into effective security solutions.
• Excellent communication and stakeholder management skills.
• Professional proficiency in English.

Nice to Have

• Experience with hybrid and on‑premises infrastructures.
• Experience working in cloud migration or digital transformation programs.
• Security certifications such as CISSP, CCSP, SC‑100, AZ‑500, AWS Security Specialty, or equivalent.
• Experience within financial services, fintech, or other regulated industries.

In CRIF we offer a safe and inclusive environment where colleagues are encouraged to think outside the box. CRIF is committed to creating a diverse, inclusive work environment and promoting equal opportunities throughout the employee life cycle. We aim to attract and retain the best people and embracing gender, age, culture, religion and disability diversity.

What we offer

The type of contract: permanent.

The Annual Salary for this position starts from €50,000 gross per year.

The level of classification will be determined during the selection process based on the candidate’s profile and in accordance with the National Collective Labour Agreement (CCNL) for the Tertiary, Distribution and Services sector.

The final compensation package, including any variable components (such as MBO) or additional benefits, will depend on the assessment of the candidate’s profile against the role requirements.

Pursuant to Regulation (EU) 2016/679 (“GDPR”), candidates are hereby informed that their personal data will be processed exclusively for purposes related to the management of their application and the selection process. For further information on the processing of personal data and on the exercise of their privacy rights, candidates are invited to consult the full privacy notice available at the following Link, in the "Terms of Use" section.

Cyber Security Analyst Senior • Remote, italia, Italy