Digital Compliance Expert

Aretè & Cocchi Technology; Milano; In loco; EUR 39.000 - 47.000; Tempo pieno

Vantaggi offerti da questo lavoro

Assicurazione sanitaria

Palestra interna

Sconti e convenzioni

Cafeteria interna

Descrizione del lavoro

Saipem, azienda globale leader nell'ingegneria e costruzioni nei settori energia e infrastrutture, cerca un Digital Compliance Expert all'interno della Digital e IT Strategy, Governance and Compliance.

La figura supporterà il Privacy Compliance Officer e il Digital Risk Owner, gestirà IT General Controls, CSRD, GDPR e NIS2, fornendo report e remediation plan e lavorando in un contesto ibrido con benefits aziendali.

Competenze

• Laurea magistrale in Ingegneria Informatica/Gestione/Giurisprudenza o Economia o equivalente
• 5 anni di esperienza nel campo della conformità IT e privacy

Mansioni

• Supportare il Privacy Compliance Officer per garantire conformità GDPR e protezione dati
• Garantire misure tecniche e organizzative conformi a normativa italiana ed europea
• Gestire audit e controlli interni, preparare azioni correttive e report esecutivi

Conoscenze

Controlli IT generali

Quadro COSO

Quadro COBIT

GDPR e protezione dati

CISA / audit IT

ISO 27001 Auditor

Formazione

Laurea magistrale in Ingegneria Informatica/Gestione o Giurisprudenza/Economia

Strumenti

ACL

SAP audit techniques

Office365 e Copilot365

Ms Power Platform

Descrizione del lavoro

Join Saipem and engineer a sustainable future.

We are a global leader in engineering and construction for the energy and infrastructure sectors, delivering complex onshore and offshore projects worldwide. Driven by technological innovation as “One Company”, our 30,000 people from over 130 nationalities in more than 50 countries work every day to enable the energy transition toward Net Zero. At Saipem, we embrace diversity as a driver of innovation and inclusion, while prioritizing people’s safety and environmental sustainability, even in the most challenging conditions.

Purpose of the position: As Digital Compliance Expert, within the Digital and IT Strategy, Governance and Compliance unit, you will be part of the Digital and IT Area

How can you support us?

• Supporting the Privacy Compliance Officer of the Digital and IT Area in ensuring the activities necessary for compliance with the GDPR (Regulation), among which
  • Carry out all the acts necessary to ensure the preparation of all the precautions and the adoption and implementation of all measures and provisions, both formal and substantial, required by the Regulation, including for accountability purposes, as well as by any other legislative and regulatory provision.
  • Ensure the implementation, in accordance with the corporate privacy and data protection model, of adequate technical and organizational measures to guarantee compliance with Personal Data protection requirements for each Processing.
  • Designate the system administrator(s), in accordance with the Italian Data Protection Authority of November 27, 2008, and subsequent amendments, and provide training.
• Supporting the Digital Risk Owner in ensuring the activities necessary for monitoring the effectiveness of the Internal Control System for the applications and infrastructures that fall in the perimeter “Legge 262/2005”, CSRD (Corporate Sustainability Reporting Directive, UE 2022/2464), Tax Control Frame, GDPR, NIS2, including:
  • execution of IT General Controls internal framework,
  • collection of evidence with internal stakeholders and control owners
  • ensuring IT Compliance at company level
  • identifying remedial actions
  • preparing, with internal IT teams, the execution of a remediation plan
  • preparing final executive reports for internal Stakeholders

What are we looking for?

Education: Master’s degree in Computer Engineering, Management Engineering, Law or Economics or Master’s degree with equivalent experience;

Experience: 5 years

Technical Skills: proficient knowledge of IT General Controls or General Computer Controls, COSO and COBIT frameworks, GDPR and the Italian Data Protection legislation and the main decisions of Italian Data Protection Authority.

Certified Information Systems Auditor (CISA), ISO/IEC 27001 Auditor/Lead Auditor certification, ISO/IEC 20000 Auditor/Lead Auditor certification, ISO/IEC 22301 Auditor/Lead Auditor certification, Certifications in SAP and SAP BW /4HANA, NIST Framework, ITIL 4 Foundation are considered as Plus.

IT Skills: proficient knowledge of ACL or similar tools, SAP audit techniques, Office365 and Copilot365.

Proficient knowledge of Copilot studio and Ms Power Platform are considered as Plus.

What we can offer to you:

• For home office contract: Pay not lower than 43.000,00 €
• Corporate Benefits : We offer a comprehensive benefits package, including health insurance, internal gym, discounts and partnerships, services related to health, family, well-being, and in-house cafeteria.
• Hybrid working model: Smart Working options and flexible hours to help you achieve a better work-life balance.

Transparency Note

At the end of the selection process, the Company reserves the right to offer a different job level and/or salary package compared to what is indicated in this job posting, in line with the candidate’s professional experience, technical and soft skills.

Any deviation shall be duly justified and documented in accordance with internal procedures and the Non-Discrimination Statement. Such deviation shall in no way be related to:

• the remuneration received by the candidate in previous employment relationships;
• any subjective or discriminatory factors, including but not limited to gender or other personal characteristics.

Regulatory Compliance

The decision is made in compliance with:

• the principle of equal pay for the same work or work of equal value;
• the pay transparency requirements set out in EU Directive 2023/970 and the relevant national implementing legislation.

Additional Information

PRIVACY POLICY

All interested candidates (L. 903/03) are invited to consult the privacy policy (art 13, 14, D.Lgs 196/03 and art 13 GDPR 679/16).