Overview
You will join the team dedicated to managing security reports in the Data Protection area, handling the triage, analysis and response to events and alerts related to data protection, collaborating with Cybersecurity, Compliance, Legal and Risk Management. You will contribute to the evolution of processes and playbooks, carry out investigation activities, evidence collection and impact assessment, supporting reporting to control functions and competent authorities.
What your activities will be
- Triage and qualification of alerts and events related to Data Protection, assessing their priority, impact and risk level according to a risk-based approach
- Conduct analysis and investigation activities on potential data breaches, improper use of information and anomalies in information flows, using tools such as SIEM, XDR, DLP and log management platforms for the collection, correlation and analysis of technical evidence
- Coordinate containment, mitigation and remediation activities for incidents in collaboration with Cybersecurity, IT and control functions, ensuring compliance with regulatory obligations
- Also contribute to the evolution of operational processes, procedures and playbooks, collaborating with Legal, Compliance, Risk Management, HR to ensure an integrated management of data protection matters and promote the improvement of the data protection framework.
Who we are looking for
If you have the following characteristics, we are waiting for you:
- At least 5 years of experience in Cybersecurity, Data Protection or Incident Response, with direct experience in handling alerts and conducting investigative analyses of security events.
- Operational experience using SIEM, XDR, DLP platforms, log management systems and endpoint/network detection & response tools for triage, event correlation and evidence collection.
- Ability to assess the impact of an event on the confidentiality, integrity and availability of data, supporting the classification of the event and the determination of corrective actions.
- Fluent knowledge of the English language.
What we offer
-
Gross annual salary starting from 45.000 €
-
The Group provides a variable component of remuneration as governed by the Remuneration Policies available on the Group website
-
Complementary elements governed by the National Collective Bargaining Agreement for Credit and second-level company agreements
-
Professional development initiatives supporting the growth of our people
-
Wide training offer through the Corporate Academy dedicated to the continuous development of professional, managerial and transversal skills at all levels
-
Possibility to opt for flexible work and the 4x9 compressed week
-
Modern and integrated corporate welfare system ( link)
-
Health coverage and supplementary pension from the date of hiring
-
Advantages on the Group's banking products and services
Who we are
We are leaders in Italy and one of the main banking groups in Europe. Join us and be part of our success story! With over 20 million customers in Italy and abroad, we are a true engine of sustainable growth with a strong commitment to the environment and a tangible impact on society.
People are at the centre, we take care of them by committing to create an inclusive culture within the Group where everyone feels like a protagonist and valued.
The Chief Security Officer Governance Area oversees physical security, cybersecurity and business continuity of the Group in an integrated way, leveraging specialist skills and advanced technological solutions, with the aim of guaranteeing high security standards at an international level.
The Area includes the structures of Security Staff, Group Security Planning & Models Monitoring, Corporate and Physical Security and Cybersecurity, Antifraud & Business Continuity Management, ensuring a coordinated and cross-cutting approach to the protection of the Group.
Join our international reality. The future does not wait, it is chosen!
#sharingfuture
We guarantee an inclusive environment and equal opportunities. We will consider all applications regardless of race, religion, sexual orientation, gender identity, marital status, age, disability or any other protected category in compliance with Legislative Decrees 198/2006, 215/03 and 216/03.
For the evaluation of applications, the data will be used by Intesa Sanpaolo S.p.A. as Data Controller. We invite you to read the dedicated Privacy Notice.