IT & CYBER SECURITY RISK MANAGEMENT SPECIALIST

Experteer Italy; Milano; In loco; EUR 50.000 - 70.000; Tempo pieno

Descrizione del lavoro

A leading insurance firm in Milan is seeking an IT & Cyber Security Risk Management Specialist. The ideal candidate will support control activities and strengthen the technology risk management framework. Key requirements include a relevant degree and 2-5 years in risk management. Proficiency in both Italian and English is essential for the role, which offers a dynamic work environment focused on employee development and growth.

Competenze

• 2-5 years professional experience in Information Security and Risk Management.
• Fluent in Italian and English (written and spoken).
• Understanding of technologies such as cloud, Generative AI, robotics.

Mansioni

• Review risk assessments in-line with the Company's Risk Management Framework.
• Challenge first line of defense on the effectiveness of controls.
• Execute risk analyses and thematic reviews.
• Prepare periodic reporting to Top Management.
• Monitor IT limits and Cyber Security KRIs.

Conoscenze

Information Security

Risk Management

Communication Skills

Interpersonal Skills

Knowledge of DORA regulation

Knowledge of IT and Cyber Security

Foresight in Risk Behavior

Knowledge of emerging risks

Formazione

Bachelor's or Master's Degree in relevant fields

Strumenti

Microsoft Office

GRC tools (IBM Open Pages)

Descrizione del lavoro

IT & CYBER SECURITY RISK MANAGEMENT SPECIALIST

The Risk Management Department of Allianz S.p.A. is looking for a IT & Cyber Security Risk specialist that will be focusing primarily on Control activities as part of the 2nd Line of Defense function. The ideal candidate will also support and contribute to further strengthening the risk control and governance framework for technology risk management.

Key activities include:

• Review the first line of defense's risk-taking behavior and risk assessments as well as ensure that risk assessments are performed consistently and in-line with the Company's Risk Management Framework
• Challenge constructively the first line of defense on the design and operational effectiveness of technology related controls
• Independently execute ad-hoc risk analyses, thematic/deep dive risk reviews
• Provide review and consultation to risk initiatives, events, incidents, controls and applied risk mitigation strategies
• Oversee compliance with key regulatory requirements by maintaining a regulatory monitoring radar and ensure appropriate treatment of controls and potential gaps
• Provide added value though foresight and consulting the first line regarding its risk behavior
• Prepare periodic reporting to Top Management, Committees, Board of Directors
• Monitor of IT limits as part of Risk Appetite Framework
• Monitor of IT and Cyber Security KRIs
• Assess of IT risks related to third party and IT projects

Key Requirements / Skills / Experience:

• Bachelor's or Master's Degree or equivalent preferably in Information Security, Risk Management, Information Technology, Engineering or an equivalent qualifications
• 2-5 years professional experience in Information Security and Risk Management
• Good knowledge of the DORA (Digital Operational Resilience Act) regulation
• Fluent in Italian and English (written and spoken)
• Good interpersonal and communication skills
• Good knowledge of IT and Cyber security governance topics
• Good knowledge of technologies and emerging risk such as cloud, Generative AI, robotics etc.
• Good working knowledge of Microsoft Office
• Experience with GRC tools (e.g., IBM Open Pages) is a plus

Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us.

We therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations.

Join us. Let's care for tomorrow.

Both genders may apply in accordance with the L. 903/77 (s.m.i).