Security Governance specialist

Generali Italia; Italia; On-site; EUR 45,000 - 55,000; Full time

Benefits offered by this job

Smart working & flexible hours

Meal vouchers

Supplementary health insurance

Corporate welfare system

Well-being initiatives

Training & development

Job summary

Generali Italia is seeking a Security Governance specialist with exposure to Artificial Intelligence to strengthen our security posture, enhance governance capabilities, and evolve risk management practices in alignment with strategic objectives and innovation.

You will manage governance activities, oversee third‑party security, and support audits while maintaining certifications and budgeting for the security program. AI-driven risk analysis and reporting will be key focus areas.

Qualifications

• 2-5 years of experience in Security Governance, IT Risk Management, or Cybersecurity.
• Experience or interest in AI applied to security, risk, or governance contexts.
• Good understanding of AI tools and associated risks (data governance, model risk, security implications).
• In-depth knowledge of ISO27001, ISO27035, ISAE3402, DORA, NIS2.
• At least one of CRISC, CISM, ISO 27001, CISA is a plus.
• Proficiency in SAP, Excel, PowerPoint.
• Fluent in English; German and French are a plus.

Responsibilities

• Manage security governance activities, including KPI reporting and risk assessments.
• Support internal and external audits (NIS2, DORA, ISO frameworks).
• Oversee third-party security management end-to-end.
• Define and evolve security standards, policies, and control frameworks.
• Monitor certifications (ISO27001, ISO27035, ISAE3402) and ensure compliance.
• Support budgeting and governance of security program portfolio.
• Leverage AI to enhance governance processes, including reporting and risk analysis.
• Assess AI-related risks and governance alignment with requirements.
• Track emerging technologies and integrate AI capabilities into workflows.
• Promote security awareness and continuous improvement of security posture.

Skills

Security governance

IT risk management

Cybersecurity

AI in security

Data governance

Threat management

Vulnerability management

Compliance knowledge

Stakeholder management

Financial reporting

Education

Degree in Computer Science, Engineering, Cybersecurity, Management Engineering

Tools

SAP

Excel

PowerPoint

Job description

Within our Security structure, we are looking for a motivated and skilled Security Governance specialist with exposure to Artificial Intelligence to strengthen our security posture, enhance governance capabilities, and evolve risk management practices in alignment with strategic objectives, technological innovation, and external benchmarks.

Key responsibilities

• Manage security governance activities, including KPI reporting, risk assessments (IT and Cyber), and support to internal and external audits (NIS2, DORA, ISO frameworks)
• Oversee third‑party security management end‑to‑end, ensuring alignment with contractual, regulatory, and internal policy requirements
• Define and support the evolution of security standards, policies, and control frameworks in line with regulatory requirements and industry best practices
• Monitor and maintain key certifications (ISO27001, ISO27035, ISAE3402) and ensure continuous compliance and control effectiveness
• Support budgeting, financial tracking, and governance of the Security program portfolio, including coordination with Procurement, Legal, and Finance
• Leverage Artificial Intelligence to enhance security governance processes, including reporting, risk analysis, and control monitoring
• Assess AI‑related risks and contribute to the definition of governance practices, ensuring alignment with regulatory and internal requirements
• Track emerging technologies and integrate AI capabilities into security workflows to improve efficiency and decision‑making
• Support alignment with cybersecurity operations by contributing to threat and vulnerability tracking, control effectiveness validation, and remediation monitoring
• Promote security awareness initiatives and continuous improvement of the overall security posture

Requirements

• Degree in Computer Science, Engineering, Cybersecurity, Management Engineering, or equivalent
• 2‑5 years of proven experience in Security Governance, IT Risk Management, Cybersecurity, or related fields
• Experience or strong interest in Artificial Intelligence applied to security, risk, or governance contexts
• Good understanding of AI tools and associated risks (e.g., data governance, model risk, security implications)
• Knowledge of cybersecurity principles (e.g., threat management, vulnerability management, security controls)
• In‑depth knowledge of standards and regulations: ISO27001, ISO27035, ISAE3402, DORA, NIS2
• At least one of the following certifications (CRISC, CISM, ISO 27001, CISA) is considered a plus
• Proficiency in financial and reporting tools (e.g., SAP, Excel, PowerPoint)
• Fluent in English; German and French is a plus

Soft Skills

• Strong analytical and problem‑solving skills, with a data‑driven mindset
• Excellent communication and stakeholder management capabilities
• Ability to work in complex and international environments

What we offer

• Employment at the VI level with the relevant salary, in accordance with the CCNL ANIA for non‑executive employees and the Generali Group Company Agreement.
• Gross annual salary ranging between 45K€ and 55K€. The final offer will be aligned with the candidate's professional experience, technical and soft skills relevant to the role, and may include an individual variable component.
• Smart working and flexible hours
• Corporate welfare system
• Meal vouchers
• Supplementary health insurance and discounted insurance policies
• Well‑being initiatives
• Training and development
• Structured continuous learning paths (technical and managerial)
• Career development programs within the Group
• Access to learning platforms and internal mobility opportunities, including international

As an Equal Opportunity Employer, Generali evaluates all applications based exclusively on objective and gender‑neutral criteria, including skills, experience and potential, ensuring fairness and transparency throughout the selection process.