Job Description

Scope and Purpose

Operates in close cooperation with local Information Security Officer (ISO) and with Head Office in order to ensure the definition of the objectives for the Cybersecurity and Business Continuity Programs and monitors compliance with such objectives.
Specific accountabilities of the Information Security Specialist in support of the local ISO:

• Oversight the state of information security and cybersecurity for the Branch and provides periodic reports (at least annually) on the state of information security to Top management
• Adopt, implement and update Cybersecurity policies, rules, processes and procedures in line with Head Office regulatory Framework
• In reporting to the Top management, considers to the extent applicable the confidentiality of Non-public Information and the integrity and security of Information Systems, the cybersecurity policies and procedures, the material cyber risks, the overall effectiveness of information security and cybersecurity program and possible material cybersecurity events involving the Branch
• Work strategically with Head Office to ensure that all aspects of information security and cybersecurity are properly monitored, and that security projects and tasks are properly coordinated
• Perform continuous monitoring of Information Security and Cybersecurity programs to ensure compliance with objectives, policies and procedures
• Identify and evaluate changes in local regulations, as well as trends in the Information Security and Cybersecurity marketplace, such as new products, new attacks and new countermeasures for applicability inside the Branch's environment
• Ensure the local execution of Business Continuity activities, including periodical Business Impact Analysis, tests and reporting, in line with Group model
• Work with information owners in business units to determine appropriate security objectives for securable resources.
• Monitor network activity for malicious activity
• Monitor and evaluates vulnerability reports, vendor hot-fixes, and vendor patches for applicability to deployed technologies
• Monitor the process of creating, changing, or removing user access across all systems
• Monitor the access control program. Ensure that all appropriate documentation pertaining to the recording of account creations, deletions, and permissions are correctly maintained and approved
• Implement the Cybersecurity and Business Continuity Training Programs

Required Experience

Minimum 7 years in the cybersecurity and business continuity management environment, preferably in a Financial Institution.

Required Qualifications, Skills and Knowledge

• Bachelor’s in computer science, Information Technology or related field
• Master's degree a plus
• CISSP / CISM certification preferable
• Must display subject matter experience in application security, vulnerability testing and system testing
• Solid background in assuring high level of Information Security management and Business Continuity management in an organization
• I.T./lnfo/Cyber Security risk management experience and direct participation in related risk management processes, including application risk classification and application control assessments
• Knowledge of financial industry products and related IT platform, a plus

About us

We are the leading banking group in Italy and one of the Top Tier in Europe. Join us and be part of our successful story!

With over 20 million customers in Italy and abroad, we are a true engine of sustainable growth, with a strong commitment to the environment and a tangible impact on society. People are our driving force. We take care of them and foster an inclusive culture where everyone feels valued and empowered.

Join an international and innovative Group. Don't wait for the future, choose it!

#sharingfuture

We guarantee an inclusive and equal environment. We will consider all applicants regardless of race, religion, sexual orientation, gender identity, marital status, national origin, age, disability, or any other protected category in compliance to D.lgs. 198/2006, 215/03 and 216/03.

For the evaluation of the application, the data will be processed by Intesa Sanpaolo S.p.A. as Data Controller. We invite you to review the dedicated Privacy Information Notice for more details.