ICT and Security Audit

.

Overview

Within the Chief Audit Officer Department, you will join the ICT and Security Audit team and contribute to strengthening the Group's digital resilience. The role involves auditing ICT and Cyber Security processes, applications, services, and corporate infrastructure, with a focus on cybersecurity safeguards for Artificial Intelligence and Generative AI solutions and emerging technologies, within an international, dynamic, and innovative context.

What your activities will be

• Conduct audits and assessments on the ICT and Cyber Security aspects of corporate applications, services, and infrastructure, evaluating the state of residual risk.
• Prepare reports on audit findings and propose solutions to identified critical issues to improve efficiency and compliance with corporate procedures and standards.
• Perform periodic follow-up interventions, monitoring action plans and verifying the implementation of agreed-upon corrective measures.
• Identify potential risks associated with innovation and digitalization projects, including Artificial Intelligence and Generative AI solutions and emerging technologies.
• Analyze cybersecurity safeguards related to processes, networking, perimeter protection, cloud technologies, and AI platforms.
• Contribute to the identification, updating, and analysis of ICT and cyber risks, interacting with the various stakeholders involved.

Who we are looking for

If you have the following characteristics, we are waiting for you:

• Knowledge of the main governance, management, and control processes for Information Technology and cybersecurity; office automation tools.
• Good knowledge of written and spoken English (at least B2 level).
• Knowledge of the main Artificial Intelligence platforms and technologies; security risks of AI and Generative AI solutions: prompt injection, model manipulation, data leakage, unauthorized access, and improper use of information.
• Master's degree in a STEM field (Computer Science, Cybersecurity, or related disciplines).
• Knowledge of cloud technologies, including Red Hat OpenShift, Google Cloud Platform, and Microsoft Azure.
• Knowledge of the main reference frameworks such as COBIT, NIST, and ISO standards, as well as international internal audit certifications, including CISA and CISM.

3 years of experience in the following areas are required: Cybersecurity, IT Audit, Information Security, or related activities.

What we offer

• Gross annual salary starting from €39.000.
• The Group provides a variable component of remuneration as regulated by the Remuneration Policies available on the Group's website.
• Complementary elements regulated by the National Collective Labor Agreement for the Credit Sector and second-level company agreements.
• Professional development initiatives to support the growth of our people.
• Extensive training offer through the Corporate Academy dedicated to the continuous development of professional, managerial, and soft skills at all levels.
• Possibility to join flexible work arrangements and the 4x9 short work week.
• Modern and integrated corporate welfare system ( link).
• Health coverage and supplementary pension scheme starting from the date of hiring.
• Advantages on the Group's banking products and services.

Who we are

We are leaders in Italy and one of the main banking groups in Europe. Join us and be part of our success story! With over 20 million customers in Italy and abroad, we are a true engine of sustainable growth with a strong commitment to the environment and a tangible impact on society.

People are at the center; we take care of them by committing to creating an inclusive culture within the Group where everyone feels like a protagonist and valued.

Join our international reality. The future is not waited for, it is chosen!

#sharingfuture

We guarantee an inclusive and equal opportunity environment. We will consider all applications regardless of race, religion, sexual orientation, gender identity, marital status, age, disability, or any other protected category in compliance with Legislative Decrees 198/2006, 215/03, and 216/03.

For the evaluation of applications, the data will be used by Intesa Sanpaolo S.p.A. as Data Controller. We invite you to read the dedicated Privacy Policy.

This listing was sourced from 4dayweek.io.