Security Governance & Third-Party Risk Specialist

HypoVereinsbank; Italia; On-site; EUR 30,000 - 50,000; Full time

Job summary

UniCredit S.p.A. is seeking a Group Security Assurance Specialist to advance governance, controls and third-party security across the Group.

You will define the security governance framework, oversee controls, manage third-party security activities, and support regulatory initiatives aligned with business priorities.

Collaborations with Risk, Compliance, Audit, Legal, Data Protection and Digital teams will strengthen the overall security posture and ensure regulatory readiness.

Qualifications

• Degree in Cyber Security, Computer Science, Information Technology, Engineering or equivalent practical experience.
• Experience in Security Governance, Information Security, Cyber Risk Management, Third-Party Security, or related areas.
• Knowledge of security frameworks, security controls, risk management methodologies, and governance processes.
• Strong analytical and problem-solving skills translating regulatory and business requirements into actionable security initiatives.
• Experience working with cross-functional stakeholders in regulated environments.
• Proficiency in English (written and spoken).
• Certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Implementer/Auditor are a plus.
• Experience in Security Portfolio Management, Security Controls Monitoring, or Security Assurance activities.

Responsibilities

• Define, maintain, and evolve Security policies, standards, guidelines, and governance frameworks across the Group.
• Coordinate and monitor Security controls, KPIs, and governance processes for effectiveness and compliance.
• Support Third-Party Security assessments, contractual security requirements, and security exception processes.
• Perform security posture assessments, maturity evaluations, and gap analyses against policies and regulations.
• Collaborate with Risk, Compliance, Audit, Legal, Data Protection, Digital and business stakeholders.
• Support regulatory inspections, audits, consultations, and requests from authorities.
• Monitor remediation activities related to audit findings and regulatory observations.
• Provide analysis, reporting, and insights on security posture and governance metrics.
• Support evolution of Group Security standards and guidelines across the organization.

Skills

Analytical thinking

Communication skills

Multitasking

English proficiency

Education

Degree in Cyber Security, Computer Science, IT or Engineering

Tools

CISSP

CISM

CRISC

ISO 27001 Lead Implementer/Auditor

Job description

UniCredit S.p.A. is seeking a Group Security Assurance Specialist to advance governance, controls and third-party security across the Group.

You will define the security governance framework, oversee controls, manage third-party security activities, and support regulatory initiatives aligned with business priorities.

Collaborations with Risk, Compliance, Audit, Legal, Data Protection and Digital teams will strengthen the overall security posture and ensure regulatory readiness.