Group Security Assurance_Security Governance, Controls & Third-Party Security Specialist

HypoVereinsbank; Italia; On-site; EUR 30,000 - 50,000; Full time

Job summary

UniCredit S.p.A. is seeking a Group Security Assurance Specialist to advance governance, controls and third-party security across the Group.

You will define the security governance framework, oversee controls, manage third-party security activities, and support regulatory initiatives aligned with business priorities.

Collaborations with Risk, Compliance, Audit, Legal, Data Protection and Digital teams will strengthen the overall security posture and ensure regulatory readiness.

Qualifications

• Degree in Cyber Security, Computer Science, Information Technology, Engineering or equivalent practical experience.
• Experience in Security Governance, Information Security, Cyber Risk Management, Third-Party Security, or related areas.
• Knowledge of security frameworks, security controls, risk management methodologies, and governance processes.
• Strong analytical and problem-solving skills translating regulatory and business requirements into actionable security initiatives.
• Experience working with cross-functional stakeholders in regulated environments.
• Proficiency in English (written and spoken).
• Certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Implementer/Auditor are a plus.
• Experience in Security Portfolio Management, Security Controls Monitoring, or Security Assurance activities.

Responsibilities

• Define, maintain, and evolve Security policies, standards, guidelines, and governance frameworks across the Group.
• Coordinate and monitor Security controls, KPIs, and governance processes for effectiveness and compliance.
• Support Third-Party Security assessments, contractual security requirements, and security exception processes.
• Perform security posture assessments, maturity evaluations, and gap analyses against policies and regulations.
• Collaborate with Risk, Compliance, Audit, Legal, Data Protection, Digital and business stakeholders.
• Support regulatory inspections, audits, consultations, and requests from authorities.
• Monitor remediation activities related to audit findings and regulatory observations.
• Provide analysis, reporting, and insights on security posture and governance metrics.
• Support evolution of Group Security standards and guidelines across the organization.

Skills

Analytical thinking

Communication skills

Multitasking

English proficiency

Education

Degree in Cyber Security, Computer Science, IT or Engineering

Tools

CISSP

CISM

CRISC

ISO 27001 Lead Implementer/Auditor

Job description

Apply as Group Security Assurance_Security Governance, Controls & Third-Party Security Specialist

General Information

Job ID

114532

Company

UniCredit S.p.A

Competence Line

Digital

Country

Italy

City

MILANO, ROMA

Job Type

Professional

Functional area

Security

Working time model

Full-time

Contact

[e-mail]

Base Salary min (gross)

30.000

Base Salary max (gross)

50.000

We are seeking a Security Governance, Controls & Third-Party Security Specialist to support our Group Security function. In this role, you will contribute to the

definition, implementation, and continuous improvement of the Group Security governance framework, ensuring alignment with regulatory requirements,

security standards, and business priorities. You will play a key role in overseeing security controls, managing Third-Party Security activities, supporting

regulatory initiatives, and strengthening the overall security posture across the Group.

What you'll be doing

• Define, maintain, and evolve Security policies, standards, guidelines, and governance frameworks across the Group
• Coordinate and monitor Security controls, KPIs, and governance processes to ensure effectiveness and compliance
• Support the management of Third-Party Security assessments, contractual security requirements, and security exception processes
• Perform security posture assessments, maturity evaluations, and gap analyses against internal policies and external regulations
• Collaborate with Risk, Compliance, Audit, Legal, Data Protection, Digital and business stakeholders to ensure alignment on security activities
• Support regulatory inspections, audits, consultations, and requests from supervisory authorities and institutions
• Monitor remediation activities related to audit findings, regulatory observations, and security assessments
• Provide analysis, reporting, and insights on security posture, controls effectiveness, and security governance metrics
• Support the definition and evolution of Group Security standards, models, architectures, baselines and guidelines, fostering their consistent adoption
• across the organization

What you'll need to succeed

• Degree in Cyber Security, Computer Science, Information Technology, Engineering, or equivalent practical experience
• Experience in Security Governance, Information Security, Cyber Risk Management, Third-Party Security, or related areas
• Knowledge of security frameworks, security controls, risk management methodologies, and governance processes
• Strong analytical and problem-solving skills with the ability to translate regulatory and business requirements into actionable security initiatives
• Experience working with cross-functional stakeholders in complex and regulated environments
• Strong communication and presentation skills
• Ability to manage multiple priorities and coordinate activities across different teams
• Proficiency in English (written and spoken)
• Nice to have:
• Familiarity with regulatory frameworks and security standards (e.g. DORA, NIS2, EBA Guidelines, ISO 27001, NIST)
• Knowledge of Audit, Compliance, Data Protection, and Operational Risk processes
• Professional certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor, or equivalent
• Experience in Security Portfolio Management, Security Controls Monitoring, or Security Assurance activities

What you'll get in return

#MakeInnovationHappen: Chance to make an impact in terms of transformation

#UnlockYourPotential: Join a young and stimulating environment

#ComeAsYouAre: Working within a global team

#UnlockYourPotential: Play a role of autonomy with high visibility and exposure

About UniCredit Group

UniCredit is a pan-European leading commercial bank providing best-in-class solutions and services across Italy, Germany, Austria, and Central and Eastern Europe. Our Vision is to be the Bank for Europe's Future. Our Purpose is to Empower Communities to Progress, delivering the best-in-class products and services for all stakeholders, unleashing the potential of our people and our clients across Europe. We serve over 20 million clients, supported by three Group product factories — Corporate, Individual and Payment Solutions — that ensure best-in-class expertise and scalable solutions across all markets. Our integrated model combines local proximity, deep client understanding and Group-wide capabilities, enabling seamless service and outstanding client experience. Digitalisation, operational excellence and a strong commitment to ESG principles underpin our journey, helping us deliver sustainable long-term value for clients, communities, employees and shareholders. Our shared Culture unites our people across all countries, empowering teamwork, driven execution and ambition through Ownership, Integrity and Caring.