InfoSec Governance Specialist

CRIF; Bologna; In loco; EUR 34.000 - 42.000; Tempo pieno

Descrizione del lavoro

CRIF is seeking a skilled Information Security Analyst to strengthen governance and manage technology-driven cyber risks at a global level in Bologna. You will work with the CIO, IT Cybersecurity Team and business units to identify, assess and mitigate security risks across infrastructure, applications and services.

The role focuses on practical risk management, vulnerability handling, and continuous learning in a fast-paced environment.

Competenze

• 3+ years of professional experience in Information Security Governance or Cybersecurity.
• Experience in roles such as Security Advisory, Cybersecurity Project & Program Management, IT Control Evaluation or IT Governance is a plus
• Hands-on experience in managing Information Security risk from a technical perspective, including vulnerabilities and misconfigurations.

Mansioni

• Identify, analyze and mitigate information security risks with focus on vulnerabilities and exposure of IT assets.
• Coordinate security assessments and remediation activities with vendors and third-parties to ensure closure.
• Develop, implement and revise Global Technologies Information Security policies, controls, and metrics.
• Coordinate with Global Technologies functions to align security with technical needs and regulations.
• Collaborate with Cybersecurity teams to maintain a unified security strategy across geographies.
• Provide input to embed security requirements into core IT processes.
• Engage with business units to provide cybersecurity guidance for initiatives and audits.
• Support audits and respond to client cybersecurity requests and questionnaires.
• Assist Internal Audit with remediation actions and tracking control effectiveness.

Conoscenze

Information security governance

Cybersecurity risk management

Vendor & third-party security

Regulatory & standards knowledge

Descrizione del lavoro

CRIF is seeking a skilled Information Security Analyst to strengthen governance and manage technology-driven cyber risks at a global level in Bologna. You will work with the CIO, IT Cybersecurity Team and business units to identify, assess and mitigate security risks across infrastructure, applications and services.

The role focuses on practical risk management, vulnerability handling, and continuous learning in a fast-paced environment.