Cyber Security Governance

TeamSystem; Lombardia; Hybrid; EUR 49,000 - 63,000; Full time

Benefits offered by this job

Total compensation €49-63k

Wellbeing budget

Hybrid work

Growth opportunities

Inclusive environment

Impactful work

Job summary

TeamSystem in Italy (Milan or Rome) seeks a hands-on Application Security Lead to drive secure software development, set security KPIs, and mentor teams on secure design.

You will collaborate with Product Owners, implement SAST/DAST, threat modelling, and align security controls with standards (NIS2, DORA, ISO 27000). English at C1 is required. Hybrid work with strong growth in an international group.

Qualifications

• Knowledge of app security frameworks (SAMM, ASVS, NIST CSF) and ISO 27000 family.
• Familiarity with NIS2, DORA, PCI-DSS and related compliance impacts.
• Understanding of AI risk frameworks (NIST RMF, EU AI Act) and OWASP Top 10 for LLMs.
• Hands-on SDLC security experience; code review and secure-by-design practices.

Responsibilities

• Drive improvement of application security maturity with scalable secure SDLC processes.
• Define and track security KPIs for vulnerability management (detection, remediation, exposure time).
• Lead application security initiatives across the organization and promote secure design principles.
• Collaborate with Product Owners and dev teams to align security with business priorities.
• Hands-on security work including threat modelling and implementation of security controls.
• Collaborate with engineering to implement security best practices across the lifecycle.

Skills

Security frameworks

Security testing

SDLC security

AI risk management

English communication

Tools

SAST tools

DAST tools

Penetration testing

Dependency scanning

Job description

We are the leading Tech Company in Europe, supporting digital innovation for over 45 years. We are committed to bringing digital technology into every business. How? By putting customers first and becoming the go‑to partner for professionals, small, medium and large companies, offering customised solutions and services to optimise business processes from HR and customer relations to e‑invoicing and digital payments. The Research and Development team is the beating heart of the Group's innovation. We are constantly committed to researching and developing new technologies and solutions to anticipate market needs and exceed our customers' expectations. We invest significantly in artificial intelligence (AI), exploring its potential to develop innovative solutions and improve our products and services.

In particular, you will:

• Drive the continuous improvement of the organization’s application security maturity, defining a structured and scalable approach to secure software development across teams and products.
• Define, measure, and track key security KPIs related to vulnerability management processes (e.g. detection, remediation, exposure time), providing visibility on risk and progress over time.
• Lead application security initiatives across the organization, implementing security-by-design principles from the early stages of development;
• Contribute to the definition and evolution of security controls and practices, maintaining alignment with internal standards, regulatory requirements, and industry frameworks.
• Collaborate with Product Owners and development teams to align security objectives with business priorities and to promote a shared security culture throughout the software development lifecycle.
• Hands‑on Application Security role (non‑GRC) requiring strong expertise in software security, secure architecture, threat modelling, and secure development practices.
• Collaborate closely with engineering teams to define and implement security best practices across the software development lifecycle.

What skills are we looking for?

• Good knowledge of application security frameworks such as SAMM, ASVS, NIST CSF, and similar;
• Understanding of certification standards like ISO 27000, as well as NIS2, DORA, ACN guidelines, PCI‑DSS, and their impact on application security
• Knowledge of AI‑focused risk and security frameworks, including NIST AI RMF, EU AI Act requirements, ISO/IEC 23894, OWASP Top 10 for LLMs, and Google SAIF will be considered a plus;
• Understanding of AI‑related risks, key facts, and ecosystem dynamics, paired with strong curiosity and continuous awareness of the current and emerging AI technological landscape;
• Prior experience as a software developer or security engineer, with hands‑on understanding of the software development lifecycle (SDLC) and the ability to read/review code is a plus. Familiarity with application security testing methodologies (SAST, DAST, penetration testing, dependency/vulnerability scanning) is also considered a plus.
• Strong knowledge of application security design principles, such as input filtering, data encryption (in transit and at rest), authentication/authorization frameworks, and secure‑by‑design best practices.
• Advanced proficiency in English (C1 level).

Do you recognize yourself in the skills we’re looking for? That’s a great start. We’re looking for people who reflect our values through their growth mindset and their ability to turn challenges into opportunities.

• ENTREPRENEURSHIP - is the engine that drives us to excel, innovate and challenge ourselves for our own success and that of our company. We are proactive, responsible and customer‑centric, always ready to question the status quo and achieve extraordinary results.
• INNOVATION - is the guiding light that illuminates our path as we move through an environment full of different experiences, knowledge and perspectives. We are not afraid of making mistakes; we work in an environment that is fertile for the development of innovative solutions.
• INCLUSION - is the sentiment that guides our relationships amongst individuals, each of whom has a different history and experience. We advocate for an inclusive work environment that values each person's unique characteristics.

What we offer:

• Total compensation: € 49.000 – € 63.000 Including a variable component linked to performance. Full-time reference.
• Wellbeing Digital Wallet: from € 3.850 per year. A personal budget to support your wellbeing: travel, medical expenses, parental support, sports, and reimbursements for personal services such as childcare, caregiving, and more.
• Flexibility: we work in a hybrid model, with autonomy over when to come into the office. For us, being on‑site makes sense when it improves the way we work: you come in when collaboration with colleagues makes a difference, not for presence, but for effectiveness.
• Growth: we offer tailored learning paths and concrete development opportunities within a continuously evolving international group.
• Environment: we promote an inclusive workplace built on trust, collaboration, and the value of diverse perspectives.
• Impact: every day we work to create value for people, businesses, and communities through digital technology.

Location

The position is opened in the Milan or Rome offices.