Senior Information Security Expert

Allianz; Italia; Ibrido; EUR 46.000 - 72.000; Tempo pieno

Vantaggi offerti da questo lavoro

Hybrid work model

Bonuses

Pension

Health insurance

Employee shares

Discounts

Descrizione del lavoro

Allianz Bulgaria is seeking a Senior Information Security Expert to govern IS across the service lifecycle, manage IS risk, and drive IAM transformation. The role includes advisory work with stakeholders, coordinating incident response, and leading vulnerability remediation with IT and business teams.

Strong knowledge of ISMS (ISO 27001/27002) and regulatory requirements (DORA, NIS2) is essential, along with security certifications. AI security risk governance experience is a plus.

Competenze

• 5+ years in information security Governance, Risk & Compliance and IAM
• 3+ years IT background with focus on information security or risk management
• Knowledge of ISO 27001/27002 and regulatory requirements (DORA, NIS2)
• Ability to translate technical risks into business language for diverse audiences
• Desirable: ISO 27001 Lead Auditor, CISSP, CISM, or CompTIA Security+
• Understanding AI security risks and governance for AI/ML systems

Mansioni

• Govern IS across the service lifecycle and ensure security controls throughout service lifecycles
• Manage IS risk, conduct risk assessments and develop mitigation strategies
• Drive IAM transformation and onboarding of applications to centralized IAM solutions
• Provide IS advisory & stakeholder engagement with regional and central IS teams
• Lead incident response coordination and ensure lessons learned
• Coordinate vulnerability remediation with IT and business owners
• Promote security awareness through training materials and campaigns

Conoscenze

Deep IS expertise

GRC & IAM

IT security

Project management

Communication

Certifications

AI security awareness

Descrizione del lavoro

Senior Information Security Expert

102808 | IT & Tech Engineering | Professional | Non-Executive | Allianz Bulgaria | Full-Time | Permanent

What you do:

• Govern IS across the service lifecycle— Ensure effective implementation of Information Security principles and controls throughout the full lifecycle of services delivered by Allianz Technology, including those provided by third parties and outsourcing partners.
• Manage IS risk— Conduct risk assessments, evaluate control effectiveness, identify policy deviations, and develop actionable mitigation strategies aligned with the organization's risk appetite.
• Drive IAM transformation— Ensure the rollout and adoption of the IAM target operating model in alignment with Group requirements; oversee onboarding of local applications to centralized IAM solutions and services.
• Provide IS advisory & stakeholder engagement— Act as a trusted advisor to business and IT stakeholders, liaise with regional and central IS teams, and champion a security-first culture.
• Lead incident response coordination— Manage Information Security incidents end-to-end, coordinating cross-functional response and ensuring timely resolution and lessons learned.
• Coordinate vulnerability remediation— Participate in the vulnerability management process, prioritize findings based on risk, and drive remediation activities with IT and business owners.
• Promote security awareness— Design and deliver engaging training materials, awareness campaigns, and regular communication bulletins to elevate security culture across the organization.

What you bring:

• Deep IS expertise— Strong knowledge of IT security technologies, architectures, processes, and ISMS frameworks (e.g., ISO 27001/27002), including regulatory requirements such asDORAandNIS2.
• GRC & IAM experience— 5+ years of relevant hands‑on experience in information security Governance, Risk, & Compliance and proven experience with Identity & Access Management processes and tools.
• Solid IT foundation— 3+ years IT background with focus on information security and/or risk management.
• Project management skills— Demonstrated ability to align teams, set expectations, and follow through complex enterprise projects.
• Communication & influence— Excellent English written and verbal communication skills with the ability to translate technical risks into business language for diverse audiences.
• Certifications - One or more of the following is highly desirable: ISO 27001 Lead Auditor, CISSP, CISM, or CompTIA Security+. Equivalent certifications in information security, risk management, or IT governance will also be considered.
• AI security awareness — Understanding of security risks, threats, and governance challenges associated with Artificial Intelligence and Machine Learning systems (e.g., adversarial attacks, model poisoning, data leakage, prompt injection, shadow AI usage). Ability to assess AI systems against risk classification requirements and organizational policies.

What we offer:

• Offer a hybrid work model balancing in-person collaboration and remote work.
• Provide a comprehensive compensation and benefits package, including bonuses, pension, health insurance, employee shares, and discounts.
• Support lifelong learning through career development, digital learning programs, and international mobility, fostering innovation and empowerment.
• Present excellent career opportunities in insurance, asset management, and banking, with active communication across Allianz Group and key functions.

Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us.

At Allianz, we stand for unity: we believe that a united world is a more prosperous world, and we are dedicated to consistently advocating for equal opportunities for all. And the foundation for this is our inclusive workplace, where people and performance both matter, and nurtures a culture grounded in integrity, fairness, inclusion and trust.

We therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations.

Join us. Let's care for tomorrow.