Skip to main content
100 years and 72 days since the five-day weekRead the story
Intesa Sanpaolo logo
Intesa Sanpaolo

Cybersecurity Oversight Specialist

4 x 9hr days100% payHybrid · Milan or Turin

Overview

We are looking for an experienced and motivated professional to join Intesa Sanpaolo's Cybersecurity Oversight team. You will enter a group dedicated to verifying and measuring the Group's security solutions and defining investment strategies. You will work with a holistic and global approach, creating value for both the Parent Company and the Legal Entities of the Intesa Sanpaolo Group. In an international, dynamic, and rapidly growing context, you will have the opportunity to collaborate closely with diverse professional expertise and corporate cultures.

What will your activities be

  • Design and support the implementation of dashboarding and monitoring systems
  • Design and support the implementation of machine learning algorithms and data analysis
  • Identification, verification, and monitoring of corporate security measures to improve their coverage and completeness
  • Analyze, understand, and verify the implementation of Cybersecurity requirements arising from the Bank's project initiatives, in terms of consistency, policies, and standards
  • Prepare reports on the verifications and measurements carried out, highlighting gaps and shortcomings, also through the production and maintenance of appropriate indicators (e.g., KPIs)
  • Ensure constant and effective monitoring of all remediation activities in response to gaps identified during verification and measurement to ensure their timely resolution
  • Participation and management of projects, coordinating suppliers and internal staff to achieve objectives, interfacing with all involved business functions and handling reporting to management
  • Maintain and ensure effective relationships with internal stakeholders active in verification and monitoring processes
  • Contribute to the management of the budget, forecasting, and multi-year planning process

Who we are looking for

If you have the following characteristics, we are waiting for you:

  • 5-10 years of experience in cybersecurity
  • Degree in Computer Science or Scientific field
  • Knowledge of cybersecurity topics, with particular reference to the Finance sector and the protection of digital services for customers and internal users, the main security vulnerabilities and threats from cyber attacks
  • Knowledge of reference frameworks (e.g., NIST Cybersecurity, ISO 27001, ISO 22301...) and cybersecurity and business continuity regulations (e.g., Law 133 on the national cyber security perimeter, Circular 285, NIS Directive, PSD2...)
  • Ability to manage high-complexity organizational and technological initiatives
  • Knowledge of the English language
  • Knowledge of reporting systems and data analysis
  • Knowledge of the main solutions and technologies in the Cybersecurity field for the protection of infrastructures: network, endpoint, mobile device, IoT devices, mainframe
  • Microsegmentation, SASE framework, vulnerability management and application & code security, data security
  • Knowledge of technologies for data protection (Data Masking, Tokenization, Data Classification, Data Loss Prevention, backup security...)
  • Knowledge of technological security solutions for symmetric and asymmetric encryption, management of encryption keys on-premises and in the cloud, and management of digital certificates
  • Knowledge of digital identity management solutions, with experience gained in the field of Identity Access Management
  • Knowledge of solutions for the security and protection of cloud, multi-cloud, and hybrid architectures
  • Knowledge of API management, preferably in the context of Open Digital Banking architectures

The following knowledge represents a preferential qualification:

  • Risk and compliance management
  • Data analysis
  • Security architectures and solutions
  • Offensive Security certifications - OSCP, OSCE, OSWE, EC-Council CEH (Certified Ethical Hacker), ISACA - CSX Fundamentals, CISSP, PMP

What we offer you

  • Gross annual salary starting from €50,000

  • The Group provides a variable component of remuneration as regulated by the Remuneration Policies available on the Group website

  • Complementary elements governed by the National Collective Labor Agreement for Credit and second-level company agreements

  • Professional development initiatives to support the growth of our people

  • Extensive training offerings through the Corporate Academy dedicated to continuous development of professional, managerial, and transversal skills at all levels

  • Possibility to participate in flexible work and a 4x9 short week

  • Modern and integrated corporate welfare system (link)

  • Healthcare coverage and supplementary pension from the date of hire

  • Advantages on products and services of the Group's banks

Who we are

We are a leader in Italy and one of the main banking groups in Europe. Join us and be part of our success story! With over 20 million customers in Italy and abroad, we are a true engine of sustainable growth with a strong commitment to the environment and a tangible impact on society.

People are at the center, and we take care of them by committing to creating an inclusive culture within the Group in which everyone feels like a protagonist and valued.

The Chief Security Officer Governance Area oversees in an integrated manner the physical security, cybersecurity, and operational continuity of the Group, leveraging specialized expertise and advanced technological solutions, with the objective of ensuring high international security standards.

The Area includes the structures of Security Staff, Group Security Planning & Models Monitoring, Corporate and Physical Security and Cybersecurity, Antifraud & Business Continuity Management, ensuring a coordinated and cross-functional approach to the protection of the Group.

Join our international reality. The future doesn't wait, you choose it!

#sharingfuture

We guarantee an inclusive environment and equal opportunities. We will consider all applications regardless of race, religion, sexual orientation, gender identity, marital status, age, disability, or any other protected category in compliance with D.lgs. 198/2006, 215/03, and 216/03.

For the evaluation of applications, data will be used by Intesa Sanpaolo S.p.A. as Data Controller. We invite you to review the Privacy Notice dedicated to this.