Senior Application Security & Governance Lead

TeamSystem; Lombardia; Híbrido; EUR 49 000 - 63 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Total compensation €49-63k

Wellbeing budget

Hybrid work

Growth opportunities

Inclusive environment

Impactful work

Resumo da oferta

TeamSystem in Italy (Milan or Rome) seeks a hands-on Application Security Lead to drive secure software development, set security KPIs, and mentor teams on secure design.

You will collaborate with Product Owners, implement SAST/DAST, threat modelling, and align security controls with standards (NIS2, DORA, ISO 27000). English at C1 is required. Hybrid work with strong growth in an international group.

Qualificações

• Knowledge of app security frameworks (SAMM, ASVS, NIST CSF) and ISO 27000 family.
• Familiarity with NIS2, DORA, PCI-DSS and related compliance impacts.
• Understanding of AI risk frameworks (NIST RMF, EU AI Act) and OWASP Top 10 for LLMs.
• Hands-on SDLC security experience; code review and secure-by-design practices.

Responsabilidades

• Drive improvement of application security maturity with scalable secure SDLC processes.
• Define and track security KPIs for vulnerability management (detection, remediation, exposure time).
• Lead application security initiatives across the organization and promote secure design principles.
• Collaborate with Product Owners and dev teams to align security with business priorities.
• Hands-on security work including threat modelling and implementation of security controls.
• Collaborate with engineering to implement security best practices across the lifecycle.

Conhecimentos

Security frameworks

Security testing

SDLC security

AI risk management

English communication

Ferramentas

SAST tools

DAST tools

Penetration testing

Dependency scanning

Descrição da oferta de emprego

TeamSystem in Italy (Milan or Rome) seeks a hands-on Application Security Lead to drive secure software development, set security KPIs, and mentor teams on secure design.

You will collaborate with Product Owners, implement SAST/DAST, threat modelling, and align security controls with standards (NIS2, DORA, ISO 27000). English at C1 is required. Hybrid work with strong growth in an international group.