Security Governance & Third-Party Risk Lead

HypoVereinsbank; Roma; Remote; EUR 30,000 - 50,000; Full time

Job summary

UniCredit Group is seeking a Security Governance, Controls & Third-Party Security Specialist to strengthen the Group Security function. The role focuses on establishing governance frameworks, monitoring controls, and coordinating third-party security activities to ensure regulatory alignment and robust security posture.

You will collaborate with risk, compliance, and legal teams to drive remediation, reporting, and continuous improvement across the organization.

Qualifications

• Degree in Cyber Security, Computer Science, Information Technology, Engineering, or equivalent practical experience.
• Experience in Security Governance, Information Security, Cyber Risk Management, Third-Party Security, or related areas.
• Knowledge of security frameworks, security controls, risk management methodologies, and governance processes.
• Strong analytical and problem-solving skills; ability to translate regulatory and business requirements into actionable security initiatives.
• Experience working with cross-functional stakeholders in complex and regulated environments.
• Strong communication and presentation skills.

Responsibilities

• Define, maintain, and evolve security policies, standards, guidelines, and governance frameworks across the Group.
• Coordinate and monitor security controls, KPIs, and governance processes for effectiveness and compliance.
• Support third-party security assessments, contractual security requirements, and security exception processes.
• Perform security posture assessments, maturity evaluations, and gap analyses against internal policies and external regulations.
• Collaborate with Risk, Compliance, Audit, Legal, Data Protection, Digital and business stakeholders to align security activities.

Skills

Security Governance

Third-Party Security

Risk Management

Regulatory Compliance

ISO 27001

NIST

CISSP/CISM

English Proficiency

Education

Degree in Cyber Security, Computer Science, Information Technology, Engineering

Job description

UniCredit Group is seeking a Security Governance, Controls & Third-Party Security Specialist to strengthen the Group Security function. The role focuses on establishing governance frameworks, monitoring controls, and coordinating third-party security activities to ensure regulatory alignment and robust security posture.

You will collaborate with risk, compliance, and legal teams to drive remediation, reporting, and continuous improvement across the organization.