Digital Compliance Expert

Saipem; Milano; Ibrido; EUR 39.000 - 47.000; Tempo pieno

Vantaggi offerti da questo lavoro

Health insurance

Internal gym

Discounts and partnerships

Cafeteria

Descrizione del lavoro

Saipem is seeking a Digital Compliance Expert to join the Digital and IT Strategy, Governance and Compliance unit. You will support the Privacy Compliance Officer in ensuring GDPR compliance for processing activities, and help implement appropriate technical and organizational measures.

You will also assist the Digital Risk Owner to monitor internal controls across Legge 262/2005, CSRD, NIS2 and related frameworks, coordinating with IT teams and stakeholders to drive remediation and reporting.

Competenze

• Master’s degree in Computer Engineering, Management Engineering, Law or Economics, or equivalent experience.
• 5 years of experience in IT compliance or related fields.
• Strong knowledge of IT General Controls, COSO and COBIT, GDPR and Italian data protection rules.
• Certifications in IT governance and security are considered as plus.

Mansioni

• Support the Privacy Compliance Officer to ensure GDPR compliance across processes.
• Implement and monitor technical and organizational measures for data protection.
• Designate system administrators and provide training.
• Assist the Digital Risk Owner in monitoring internal controls for Legge 262/2005, CSRD, NIS2 and related frameworks.
• Support IT General Controls and collect evidence with stakeholders.
• Identify remedial actions and help prepare remediation plans.
• Prepare final executive reports for internal stakeholders.

Conoscenze

IT General Controls

COSO framework

COBIT framework

GDPR

Italian data protection law

Formazione

Master’s degree in Computer Engineering, Management Engineering, Law or Economics

Strumenti

ACL or similar tools

SAP audit techniques

Office365

Copilot365

Descrizione del lavoro

--

Join Saipem and engineer a sustainable future. We are a global leader in engineering and construction for the energy and infrastructure sectors, delivering complex onshore and offshore projects worldwide. Driven by technological innovation as "One Company", our 30,000 people from over 130 nationalities in more than 50 countries work every day to enable the energy transition toward Net Zero. At Saipem, we embrace diversity as a driver of innovation and inclusion, while prioritizing people’s safety and environmental sustainability, even in the most challenging conditions.

Purpose of the position:

As Digital Compliance Expert, within the Digital and IT Strategy, Governance and Compliance unit, you will be part of the Digital and IT Area.

How can you support us?

Supporting the Privacy Compliance Officer of the Digital and IT Area in ensuring the activities necessary for compliance with the GDPR (Regulation), among which:

• Carry out all the acts necessary to ensure the preparation of all the precautions and the adoption and implementation of all measures and provisions, both formal and substantial, required by the Regulation, including for accountability purposes, as well as by any other legislative and regulatory provision.
• Ensure the implementation, in accordance with the corporate privacy and data protection model, of adequate technical and organizational measures to guarantee compliance with Personal Data protection requirements for each Processing.
• Designate the system administrator(s), in accordance with the Italian Data Protection Authority of November 27, 2008, and subsequent amendments, and provide training.

Supporting the Digital Risk Owner in ensuring the activities necessary for monitoring the effectiveness of the Internal Control System for the applications and infrastructures that fall in the perimeter "Legge 262/2005", CSRD (Corporate Sustainability Reporting Directive, UE 2022/2464), Tax Control Frame, GDPR, NIS2, including:

• execution of IT General Controls internal framework,
• collection of evidence with internal stakeholders and control owners
• ensuring IT Compliance at company level
• identifying remedial actions
• preparing, with internal IT teams, the execution of a remediation plan
• preparing final executive reports for internal Stakeholders

What are we looking for?

• Education: Master’s degree in Computer Engineering, Management Engineering, Law or Economics or Master’s degree with equivalent experience;
• Experience: 5 years
• Technical Skills: proficient knowledge of IT General Controls or General Computer Controls, COSO and COBIT frameworks, GDPR and the Italian Data Protection legislation and the main decisions of Italian Data Protection Authority.

Certified Information Systems Auditor (CISA), ISO/IEC 27001 Auditor/Lead Auditor certification, ISO/IEC 20000 Auditor/Lead Auditor certification, ISO/IEC 22301 Auditor/Lead Auditor certification, Certifications in SAP and SAP BW /4HANA, NIST Framework, ITIL 4 Foundation are considered as Plus.

• IT Skills: proficient knowledge of ACL or similar tools, SAP audit techniques, Office365 and Copilot365.

Proficient knowledge of Copilot studio and Ms Power Platform are considered as Plus.

What we can offer to you:

• For home office contract: Pay not lower than 43.000,00 €
• Corporate Benefits: We offer a comprehensive benefits package, including health insurance, internal gym, discounts and partnerships, services related to health, family, well-being, and in-house cafeteria.
• Hybrid working model: Smart Working options and flexible hours to help you achieve a better work-life balance.

Transparency Note

At the end of the selection process, the Company reserves the right to offer a different job level and/or salary package compared to what is indicated in this job posting, in line with the candidate’s professional experience, technical and soft skills. Any deviation shall be duly justified and documented in accordance with internal procedures and the Non-Discrimination Statement. Such deviation shall in no way be related to:

• the remuneration received by the candidate in previous employment relationships;
• any subjective or discriminatory factors, including but not limited to gender or other personal characteristics.

Regulatory Compliance

The decision is made in compliance with:

• the principle of equal pay for the same work or work of equal value;
• the pay transparency requirements set out in EU Directive 2023/970 and the relevant national implementing legislation.

Additional Information

We support your development! Do you feel you might not fit this role perfectly? If you think you can contribute to our business development in the future, don’t hesitate to apply anyway through our spontaneous application form!

PRIVACY POLICY

All interested candidates (L. 903/03) are invited to consult the privacy policy (art 13, 14, D.Lgs 196/03 and art 13 GDPR 679/16).

--